Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Univention Clear all filters
TI-2023-20233 CVE-2023-38994 · GHSA-79jx-q243-6wc7

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS…

Priority LOW 34

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to…

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00303 Published 2023-10-31 No fix listed CWE-668
TI-2020-13235 CVE-2020-17477 · GHSA-39vr-m637-4v3h

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata…

Priority LOW 29

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators to read LDAP password hashes (sambaNTPassword, krb5Key, sambaPasswordHistory, a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2023-10-26 No fix listed CWE-522
TI-2019-16054 CVE-2019-1010283 · GHSA-x8px-6gf5-46x5

Information disclosure in univention-directory-notifier

Priority LOW 36

Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01449 Published 2019-07-17 No fix listed CWE-213