Design/Logic Flaw

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

CVE-2022-25807

IGEL Universal Management Suite (UMS) 6.07.100 contains a hardcoded DES key in the LDAPDesPWEncrypter class. This allows an attacker who gains access to encrypted LDAP bind credentials to decrypt them using a static 8-byte DES key. The connected documents provide concrete details of the affected ...

PT-2022-17533

Name of the Vulnerable Software and Affected Versions IGEL Universal Management Suite UMS version 6.07.100 Description An issue was discovered in the IGEL Universal Management Suite UMS where a hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker to decrypt encrypted LDAP bind...

PT-2022-17531

Name of the Vulnerable Software and Affected Versions IGEL Universal Management Suite UMS version 6.07.100 Description An issue was discovered in the transmission of cleartext LDAP bind credentials by the cmd mgt load mgt tree command, allowing an attacker who can intercept or inspect traffic...

CVE-2022-25805: Cleartext Transmission of Sensitive Information

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-1800)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-1783)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2022-1654511849 Fixed CVE-2021-25219 in bind

CVE-2021-25219: fix possible performance degradation by disabling lame-ttl cache...

EulerOS 2.0 SP10 : bind (EulerOS-SA-2022-1783)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of...

EulerOS 2.0 SP10 : bind (EulerOS-SA-2022-1800)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of...

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

CLSA-2022-1654175851 Fixed CVE-2021-25219 in bind

CVE-2021-25219: fix possible performance degradation by disabling lame-ttl cache...

Netapp E-Series SANtricity OS Controller Software 安全漏洞

Netapp E-Series SANtricity OS Controller Software is a disk array OS controller software from Netapp Inc. in the United States. A security vulnerability exists in Netapp E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2. An attacker could exploit the vulnerability by stori...

CVE-2022-23236

CVE-2022-23236 affects NetApp E-Series SANtricity OS Controller Software versions 11.40–11.70.2. The vulnerability arises from storing the LDAP BIND password in plaintext in a file accessible to privileged users, creating a confidentiality risk for LDAP credentials. The available documents do not...

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

PT-2022-15913

Name of the Vulnerable Software and Affected Versions E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 Description The issue concerns the storage of the LDAP BIND password in plaintext within a file that is accessible only to privileged users. Recommendations For E-Series...

CVE-2022-23236: Cleartext Storage of Sensitive Information

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

SUSE SLES12: bind / bind-chrootenv / bind-doc / bind-libs / bind-libs-32bit / etc (SUSE-SU-2022:1616-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1616-1 advisory. - CVE-2021-25220: Fixed potentially incorrect answers by cached forwarders bsc1197135. Tenable has extracted the preceding description block...

SUSE: Security Advisory (SUSE-SU-2022:1616-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...