CVE-2020-17477 — n/a / n/a

Description (CNA)

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators to read LDAP password hashes (sambaNTPassword, krb5Key, sambaPasswordHistory, and pwhistory) via LDAP search requests. For example, a teacher can gain administrator access via an NTLM hash.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://forge.univention.org/bugzilla/show_bug.cgi?id=50669

ADP enrichment

CVE

No English description supplied.

https://forge.univention.org/bugzilla/show_bug.cgi?id=50669

CISA-ADP

No English description supplied.

No references supplied.