#information-disclosure

1. 2023-06-28

   CVE-2023-32268: cleartext LDAP credentials in MicroFocus Filr ApplianceCVE-2023-32268

   A Filr administrator can retrieve, in cleartext, the LDAP service password used to synchronise Active Directory, opening a path to full domain controller compromise.

   • #cve
   • #information-disclosure
   • #ldap
   • #active-directory
   • #penetration-test

← all tags