CVE-2022-38046

CVE-2022-38046 is a real vulnerability in Windows Web Account Manager that could lead to information disclosure. The affected component is part of Windows, and the risk is described as HIGH (CVSSv3.1 7.5). Public exploits exist per a Kaspersky vulnerability outline, and Microsoft has released sec...

CVE-2022-38046 Web Account Manager Information Disclosure Vulnerability

...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.Microsoft Windows Web Account Manager is vulnerable to an information disclosure vulnerability that stems from inadequate protection of sensitive information on network systems or products, which...

PT-2022-5752 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The Web Account Manager Information Disclosure Vulnerability is related to insufficient protection of service data in the Windows operating system. This issue can be exploited by a remote...

The vulnerability of the Security Account Manager in the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Security Account Manager in the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

Microsoft Windows Multiple Vulnerabilities (KB5015861)

This host is missing an important security update according to Microsoft KB5015861 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2022-30208

Windows Security Account Manager SAM Denial of Service Vulnerability...

KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...

PT-2022-3741 · Microsoft · Windows Security Account Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Security Account Manager SAM affected versions not specified Description: The issue is related to the incorrect cleanup or release of resources in the Windows Security Account Manager SAM. It allows an attacker to cause a denial of...

Microsoft Windows Security Account Manager 输入验证错误漏洞

Microsoft Windows Security Account Manager is a Windows security account manager from Microsoft USA for storing user passwords. It can be used to authenticate local and remote users. An input validation error vulnerability exists in Microsoft Windows Security Account Manager. The following produc...

Debian: Security Advisory (DSA-5177-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote Code Execution (RCE)

ldap-account-manager:sid is vulnerable to remote code execution. LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf...

Arbitrary Code Execution

ldap-account-manager is vulnerable to arbitrary code execution. The vulnerability exists due to object instantiation which allows an attacker to inject and execute arbitrary php scripts...

Remote Code Execution

ldap-account-manager is vulnerable to remote code execution. An attacker is able to inject the first constructor argument leading to code execution if non-LAM classes are instantiated during object creation...

Information Disclosure

ldap-account-manager is vulnerable to information disclosure. The vulnerability exists because the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by configuration, allowing an attacker to gain sensitive...

Debian DSA-5177-1 : ldap-account-manager - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5177 advisory. Arseniy Sharoglazov discovered multiple security issues in LDAP Account Manager LAM, a web frontend for managing accounts in an LDAP directory, which could result...

DSA-5177-1 ldap-account-manager - security update

Bulletin has no description...

LDAP Account Manager注入漏洞

LDAP Account Manager is a web front-end for managing entries in stored LDAP directories e.g., users, groups, DHCP settings. versions prior to LDAP Account Manager 8.0 contain an injection vulnerability that could be exploited by an attacker to write a web-shell to the /lam/tmp/ directory and gain...

LDAP Account Manager Parameter Injection Vulnerability

LDAP Account Manager is a web front-end for managing entries e.g., users, groups, DHCP settings stored in the LDAP directory. LDAP Account Manager LAM versions prior to 8.0 are vulnerable to parameter injection, which stems from the fact that LAM instantiates objects from arbitrary classes and ca...

LDAP Account Manager File Upload Vulnerability

LDAP Account Manager is a web front-end for managing entries stored in LDAP directories e.g., users, groups, DHCP settings. file upload vulnerability exists in LDAP Account Manager LAM versions prior to 8.0, which stems from a faulty regular expression that allows PHP scripts to be uploaded to th...