CVE-2022-25804

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100

published June 9, 2022

CVSS
—
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for the UMS superuser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Published
2022-06-09T00:45Z
EPSS history
Timeline
  • 09 JUN 00:45Z
    An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100
    cvelistv5