5.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.