CVE-2023-38994

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in…

High · published October 31, 2023

CVSS v3.1
7.9
EPSS
0%
Percentile
27.2
In the wild
Unconfirmed
What it is

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform followup attacks. By default, the configuration of UCS does not allow local ssh access for regular users.

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.2th percentile
Published
2023-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in…
    cvelistv5