IGEL Universal Management Suite (UMS) 6.07.100
Approved changes feed: RSS · Atom
cpe:2.3:a:igel:universal_management_suite:6.07.100:*:*:*:*:*:*:*
part: a version: 6.07.100 update: *
| Vendor | Igel (f2e1e3ee-99f0-57f8-9fed-a65e0f5c3a46) |
|---|---|
| Product | Universal Management Suite (797f6a30-17f9-54ba-88a7-3d6d67b024ca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25807 |
vulnerable | 2026-06-08 05:41:49.493614 |
Details available
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-byte DES key.
Published: 2022-06-09T00:45:01.000Z
Updated: 2024-08-03T04:49:43.558Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25806 |
vulnerable | 2026-06-08 05:41:49.493313 |
Details available
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the PrefDBCredentials class allows an attacker, who has discovered encrypted superuser credentials, to decrypt those credentials using a static 8-byte DES key.
Published: 2022-06-09T00:45:07.000Z
Updated: 2024-08-03T04:49:43.737Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25805 |
vulnerable | 2026-06-08 05:41:49.492998 |
Details available
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials by the cmd_mgt_load_mgt_tree command allows an attacker (who can intercept or inspect traffic between an authenticated UMS client and server) to compromise those LDAP bind credentials.
Published: 2022-06-09T00:45:14.000Z
Updated: 2024-08-03T04:49:43.929Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25804 |
vulnerable | 2026-06-08 05:41:49.492595 |
Details available
An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for the UMS superuser.
Published: 2022-06-09T00:45:20.000Z
Updated: 2024-08-03T04:49:43.831Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.