Lucene search

K

Igel Security Vulnerabilities

cve
cve

CVE-2022-25807

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-byte DES...

5.5CVSS

5.4AI Score

0.001EPSS

2022-06-09 04:15 AM
61
9
cve
cve

CVE-2022-25806

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the PrefDBCredentials class allows an attacker, who has discovered encrypted superuser credentials, to decrypt those credentials using a static 8-byte DES...

8.8CVSS

8.5AI Score

0.001EPSS

2022-06-09 04:15 AM
49
7
cve
cve

CVE-2022-25804

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for.....

5.5CVSS

5.3AI Score

0.0004EPSS

2022-06-09 04:15 AM
49
7
cve
cve

CVE-2022-25805

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials by the cmd_mgt_load_mgt_tree command allows an attacker (who can intercept or inspect traffic between an authenticated UMS client and server) to compromise those LDAP.....

6.5CVSS

6.5AI Score

0.001EPSS

2022-06-09 04:15 AM
31
9