CVE-2022-25805 - CVE House
Back to Database
Status published Medium CVE-2022-25805

An issue was discovered in the IGEL Universal Management Suite...

Vulnerability Description

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials by the cmd_mgt_load_mgt_tree command allows an attacker (who can intercept or inspect traffic between an authenticated UMS client and server) to compromise those LDAP bind credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-25805

Credits & Attribution

No credits recorded in the NVD database.

References

More from igel

View All →
CVE-2022-25807
An issue was discovered in the IGEL Universal Management Suite...
Medium 5.5
CVE-2022-25806
An issue was discovered in the IGEL Universal Management Suite...
High 8.8
CVE-2022-25804
An issue was discovered in the IGEL Universal Management Suite...
Medium 5.5

Affected Vendor

Affected Software

universal management suite
Vulnerable Versions:
6.07.100

Timeline

Official Publish: June 9th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.