Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-25655 EUVD-2024-22971GHSA-f8c5-7mvv-crq3

Insecure storage of LDAP passwords in the authentication functionality of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allo…

Published Mar 18, 2024 · Updated Aug 28, 2024 · Assigned by mitre

Description

Insecure storage of LDAP passwords in the authentication functionality of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allows members (with read access to the application database) to decrypt the LDAP passwords of users who successfully authenticate to web management via LDAP.

References