Security Advisory
CVE-2022-25807
5.5
MEDIUM
Vulnerability Description
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-byte DES key.
Published Date
June 9, 2022
Official Source
NIST NVD Advisory