CVE-2022-25807

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100

published June 9, 2022

CVSS
—
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-byte DES key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Published
2022-06-09T00:45Z
EPSS history
Timeline
  • 09 JUN 00:45Z
    An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100
    cvelistv5