PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cps_config.xml file.
References
Link | Resource |
---|---|
https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10327 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-05-17 12:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-10327
Mitre link : CVE-2018-10327
JSON object : View
CWE
CWE-522
Insufficiently Protected Credentials
Products Affected
printeron
- printeron