Lucene search
+L

4 matches found

OSV
OSV
added 2021/10/01 3:15 p.m.7 views

CVE-2021-3825

On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials...

9.6CVSS5.8AI score0.01621EPSS
SaveExploits1References2
CVE
CVE
added 2021/10/01 2:36 p.m.53 views

CVE-2021-3825

CVE-2021-3825 affects the Lider module of LiderAhenk software, specifically versions 2.1.15 and earlier. The root issue is leakage of configurations via an unsecured API, which can expose valid LDAP credentials to anyone with access to the configurations API. This creates a risk of unauthorized a...

9.6CVSS9.3AI score0.01621EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/10/01 2:36 p.m.32 views

CVE-2021-3825 Missing Authorization Checks in LiderAhenk

On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials...

9.6CVSS9.4AI score0.01621EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/09/17 12:0 a.m.6 views

CVE-2021-3825

On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials...

9.6CVSS7.3AI score0.01621EPSS
SaveExploits1References4
Rows per page
Query Builder