Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kolab Groupware Server OpenLDAP明文口令存储漏洞
Vulnerability Description
Kolab Groupware Server是提供EMAIL，日历，任务计划，通知联系等功能的集成服务程序。 Kolab Groupware Server存在明文密码存储问题，本地攻击者可以利用这个漏洞获得OpenLDAP的用户密码信息。 在slapd配置文件中"/var/origkolab/etc/openldap/slapd.conf"存在如下的rootdn密码信息如： rootpw "averystrongpassword" 攻击者可以访问此配置文件获得明文密码，借此控制应用程序。
CVSS Information
N/A
Vulnerability Type
N/A