WS-2022-0413

A vulnerability exists in the "DSInternals.Common.Data.RoamedCredential.Save" method, which incorrectly parses the "msPKIAccountCredentials" LDAP attribute values. As a consequence, a malicious actor would be able to modify the file system of the computer where an application using this function ...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the DSInternals.Common.Data.RoamedCredential.Save method, which incorrectly parses the msPKIAccountCredentials LDAP attribute values. Consequently, a malicious actor would be able to modify the computer's file...