exploitDog

CVE-2020-17477

Опубликовано: 26 окт. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators to read LDAP password hashes (sambaNTPassword, krb5Key, sambaPasswordHistory, and pwhistory) via LDAP search requests. For example, a teacher can gain administrator access via an NTLM hash.

Ссылки

https://forge.univention.org/bugzilla/show_bug.cgi?id=50669
Issue Tracking
Third Party Advisory
https://forge.univention.org/bugzilla/show_bug.cgi?id=50669
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:univention:ucs\@school:*:*:*:*:*:*:*:*

Версия до 4.4 (включая)

EPSS

Процентиль: 19%

0.00061

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

GHSA-39vr-m637-4v3h

CVSS3: 6.5

github

больше 2 лет назад

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators to read LDAP password hashes (sambaNTPassword, krb5Key, sambaPasswordHistory, and pwhistory) via LDAP search requests. For example, a teacher can gain administrator access via an NTLM hash.

EPSS

Процентиль: 19%

0.00061

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-522