PT-2024-25724
CVE-2024-34162
·
تاريخ النشر
2024-11-26
·
تاريخ التحديث
2024-11-26
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
No specific product names, model numbers, or versions are mentioned in the provided descriptions.
Description
The issue concerns the web interface of affected devices, which is designed to hide LDAP credentials from administrative users. However, when LDAP authentication is configured to "SIMPLE", the device communicates with the LDAP server in clear-text, allowing the LDAP password to be retrieved from this communication.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾