CVE-2022-25805

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100

published June 9, 2022

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials by the cmd_mgt_load_mgt_tree command allows an attacker (who can intercept or inspect traffic between an authenticated UMS client and server) to compromise those LDAP bind credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.2th percentile
Published
2022-06-09T00:45Z
EPSS history
Timeline
  • 09 JUN 00:45Z
    An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100
    cvelistv5