The vulnerability appears in Trisolutions BRPerfX 1.4.4.0 and allows an authenticated administrator to examine the client‑side code of the administrative configuration interface, from which LDAP credentials are exposed in plain text. This exposure can lead to the compromise of LDAP credentials, potentially granting attackers unauthorized access to the LDAP system and any services relying on those credentials.

Trisolutions BRPerfX version 1.4.4.0 is affected.

The CVSS score of 7.5 indicates a high severity, while the EPSS score indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, because only an authenticated administrator can trigger the disclosure, organizations with privileged admin access are at risk. No publicly documented exploitation technique exists beyond the credential extraction via the exposed client code, but the exposure itself can be immediately leveraged by anyone with administrative privileges.