Lucene search
PRIOn knowledge basePRION:CVE-2023-38994HistoryOct 31, 2023 - 12:15 p.m.
Default configuration
2023-10-3112:15:00
PRIOn knowledge base
www.prio-n.com
8
default configuration
prometheus monitoring
plaintext password
machine account
local access
higher privileges
followup attacks
regular users
ssh access
The ‘check_univention_joinstatus’ prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform followup attacks. By default, the configuration of UCS does not allow local ssh access for regular users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| univention_corporate_server | eq | 5.0 |
Related
cvelist
cvelist
CVE-2023-38994
2023-10-31 00:00:00
nvd
nvd
CVE-2023-38994
2023-10-31 12:15:08
cve
cve
CVE-2023-38994
2023-10-31 12:15:08