Approved changes feed: RSS · Atom

cpe:2.3:a:pardus:liderahenk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPardus (7a4e2edc-fbad-59e6-957b-28f68ec87396)
ProductLiderahenk (689691be-0b59-51c2-a0ba-376fd8495f48)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/pardus-liderahenk/ahenk purl2cpe 2026-06-01 10:12:28.709331
pkg:github/pardus-liderahenk/lider-ahenk-installer purl2cpe 2026-06-01 10:12:28.709333

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3825 vulnerable 2026-06-08 05:33:54.385008 Missing Authorization Checks in LiderAhenk
CRITICAL (9.6)
On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials.
Published: 2021-10-01T14:36:20.926Z
Updated: 2026-05-18T08:11:21.125Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.