Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Univention Component: Univention Corporate Server Clear all filters
TI-2023-20233 CVE-2023-38994 · GHSA-79jx-q243-6wc7

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS…

Priority LOW 34

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to…

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00303 Published 2023-10-31 No fix listed CWE-668
TI-2019-16054 CVE-2019-1010283 · GHSA-x8px-6gf5-46x5

Information disclosure in univention-directory-notifier

Priority LOW 36

Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01449 Published 2019-07-17 No fix listed CWE-213