When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2000-10-13T04:00:00

Updated: 2024-08-08T05:21:30.774Z

Reserved: 2000-07-11T00:00:00

Link: CVE-2000-0516

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2000-06-06T04:00:00.000

Modified: 2017-10-10T01:29:10.263

Link: CVE-2000-0516

cve-icon Redhat

No data.