CVE-2022-25804 - CVE House
Back to Database
Status published Medium CVE-2022-25804

An issue was discovered in the IGEL Universal Management Suite...

Vulnerability Description

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for the UMS superuser.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-25804

Credits & Attribution

No credits recorded in the NVD database.

References

More from igel

View All →
CVE-2022-25807
An issue was discovered in the IGEL Universal Management Suite...
Medium 5.5
CVE-2022-25806
An issue was discovered in the IGEL Universal Management Suite...
High 8.8
CVE-2022-25805
An issue was discovered in the IGEL Universal Management Suite...
Medium 6.5

Affected Vendor

Affected Software

universal management suite
Vulnerable Versions:
6.07.100

Timeline

Official Publish: June 9th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.