CVE-2022-25805: Medium severity igel universal management suite vulnerability
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker (who can intercept or inspect traffic between an authenticated UMS client and server) to compromise those LDAP bind credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-25805?
The severity of CVE-2022-25805 is classified as high due to the risk of exposing cleartext LDAP bind credentials.
How do I fix CVE-2022-25805?
To fix CVE-2022-25805, you should update the IGEL Universal Management Suite to the latest version that addresses this vulnerability.
What impact does CVE-2022-25805 have on my system?
CVE-2022-25805 could allow an attacker to intercept LDAP credentials, potentially compromising the security of your user accounts.
Which version of IGEL Universal Management Suite is affected by CVE-2022-25805?
CVE-2022-25805 affects IGEL Universal Management Suite version 6.07.100.
Is there a workaround for CVE-2022-25805 until I can update?
A temporary workaround for CVE-2022-25805 is to minimize exposure to untrusted networks where traffic interception could occur.