CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be (re)entered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the vendor originally reported this as a security issue but then reconsidered because of the requirement for Admin access in order to change the configuration.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ysoft.com/en/legal/ldaps-encryption-downgrade-attack-vulnerability	Vendor Advisory
https://ysoft.com	Product

Configurations

Configuration 1 (hide)

cpe:2.3:h:ysoft:safeq_server:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-07-13 17:15

Updated : 2024-05-17 02:25

NVD link : CVE-2023-35833

Mitre link : CVE-2023-35833

CVE.ORG link : CVE-2023-35833

JSON object : View

Products Affected

ysoft

safeq_server

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2023-35833", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2023-07-13T17:15:09.270", "references": [{"url": "https://www.ysoft.com/en/legal/ldaps-encryption-downgrade-attack-vulnerability", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://ysoft.com", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be (re)entered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the vendor originally reported this as a security issue but then reconsidered because of the requirement for Admin access in order to change the configuration."}, {"lang": "es", "value": "** EN DISPUTA ** Se descubri\u00f3 un problema en YSoft SAFEQ 6 Server antes de la versi\u00f3n 6.0.82. Al modificar la URL de la configuraci\u00f3n del servidor LDAP de LDAPS a LDAP, el sistema no requiere que se (re)ingrese la contrase\u00f1a. Esto da como resultado la exposici\u00f3n de credenciales en texto claro al conectarse a un servidor LDAP no autorizado. NOTA: el proveedor inform\u00f3 originalmente esto como un problema de seguridad, pero luego lo reconsider\u00f3 debido al requisito de acceso de administrador para poder cambiar la configuraci\u00f3n.\n"}], "lastModified": "2024-05-17T02:25:29.537", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ysoft:safeq_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D367A15-4EB0-47A3-B359-20E87C26CDBB", "versionEndExcluding": "6.0.82", "versionStartIncluding": "6.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}