Design/Logic Flaw

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

PT-2013-4280

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX versions prior to 1.6.1.6 Description The issue allows local users to discover the cleartext LDAP bind password by reading the console when an unspecified level of debug logging is used in LDAP configurations...

CVE-2013-3287: Undefined Security Weakness

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

CVE-2012-6596: Undefined Security Weakness

Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493...

CVE-2011-2223: Undefined Security Weakness

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2011-3693

Name of the Vulnerable Software and Affected Versions Novell Data Synchronizer versions 1.x through 1.1.2 build 428 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as the Admin LDAP password is sent in cleartext. Recommendations For Novell Da...