Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:1 a.m.7 views

CVE-2022-31085

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by...

6.1CVSS6.7AI score0.00093EPSS
Exploits0References1
CNVD
CNVD
added 2022/06/30 12:0 a.m.34 views

LDAP Account Manager Cross-Site Scripting Vulnerability (CNVD-2022-53547)

LDAP Account Manager is a web front-end for managing entries e.g., users, groups, DHCP settings stored in the LDAP directory. cross-site scripting vulnerability exists in LDAP Account Manager LAM versions prior to 8.0, which stems from the fact that if the PHP OpenSSL extension is not installed o...

6.1CVSS1.6AI score0.00093EPSS
Exploits0References1
NVD
NVD
added 2022/06/27 9:15 p.m.18 views

CVE-2022-31085

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by...

6.1CVSS0.00093EPSS
Exploits0References3
Prion
Prion
added 2022/06/27 9:15 p.m.17 views

Design/Logic Flaw

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by...

4.3CVSS6.4AI score0.00093EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2022/06/27 8:55 p.m.19 views

CVE-2022-31085 Missing Encryption of Sensitive Data in ldap-account-manager

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by...

5.5CVSS6.2AI score0.00093EPSS
Exploits0References5
CVE
CVE
added 2022/06/27 8:55 p.m.85 views

CVE-2022-31085

CVE-2022-31085 affects LDAP Account Manager (LAM). In versions prior to 8.0, session files can contain LDAP usernames and passwords in clear text when the PHP OpenSSL extension is not installed or session encryption is disabled. The issue is fixed in LAM 8.0; if upgrading is not possible, enable ...

6.1CVSS6AI score0.00093EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.48 views

CentOS Update for php53 CESA-2011:1423 centos5 x86_64

Check for the Version of php53 OpenVAS Vulnerability Test CentOS Update for php53 CESA-2011:1423 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

7.5CVSS8.2AI score0.36532EPSS
Exploits24References2
Rows per page
Query Builder