Description
uniFLOW Universal Login Manager (ULM) Standalone
contains an information disclosure vulnerability that may allow an
authenticated administrator to access sensitive configuration information
through the ULM Remote User Interface (RUI). Exploitation requires
administrative privileges and may disclose configuration data associated with
SMTP or LDAP integrations. ULM deployments connected to uniFLOW Server or
uniFLOW Online are not affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NT-ware | uniFLOW ULM (Universal Login Manager) Standalone | ≤ 5.10 | — |
References
- https://www.canon-europe.com/psirt/advisory-information vendor-advisory
- https://ntware.atlassian.net/wiki/spaces/SA/pages/13659504652/2026+Security+Advisory+ULM+Potential+Information+Disclosure vendor-advisory mitigation