Ldap Integration

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

miniorange

NVD

Published: 2023-10-16

Updated: 2023-11-07

Summary

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.

Vulnerable Configurations

Part	Description	Count
Application	Miniorange Miniorange Active Directory Integration / Ldap Integration 1.1 Miniorange Active Directory Integration / Ldap Integration 1.4 Miniorange Active Directory Integration / Ldap Integration 1.7 Miniorange Active Directory Integration / Ldap Integration 1.8 Miniorange Active Directory Integration / Ldap Integration 2.0 Miniorange Active Directory Integration / Ldap Integration 2.5.1 Miniorange Active Directory Integration / Ldap Integration 2.5.2 Miniorange Active Directory Integration / Ldap Integration 2.5.3 Miniorange Active Directory Integration / Ldap Integration 2.5.4 Miniorange Active Directory Integration / Ldap Integration 2.5.5 Miniorange Active Directory Integration / Ldap Integration 2.5.6 Miniorange Active Directory Integration / Ldap Integration 2.6.2 Miniorange Active Directory Integration / Ldap Integration 2.6.4 Miniorange Active Directory Integration / Ldap Integration 2.7 Miniorange Active Directory Integration / Ldap Integration 2.7.1 Miniorange Active Directory Integration / Ldap Integration 2.7.2 Miniorange Active Directory Integration / Ldap Integration 2.7.4 Miniorange Active Directory Integration / Ldap Integration 2.7.7 Miniorange Active Directory Integration / Ldap Integration 2.7.43 Miniorange Active Directory Integration / Ldap Integration 2.8 Miniorange Active Directory Integration / Ldap Integration 2.8.3 Miniorange Active Directory Integration / Ldap Integration 2.91 Miniorange Active Directory Integration / Ldap Integration 2.92 Miniorange Active Directory Integration / Ldap Integration 3.0 Miniorange Active Directory Integration / Ldap Integration 3.0.2 Miniorange Active Directory Integration / Ldap Integration 3.0.3 Miniorange Active Directory Integration / Ldap Integration 3.0.4 Miniorange Active Directory Integration / Ldap Integration 3.0.6 Miniorange Active Directory Integration / Ldap Integration 3.0.7 Miniorange Active Directory Integration / Ldap Integration 3.0.8 Miniorange Active Directory Integration / Ldap Integration 3.0.9 Miniorange Active Directory Integration / Ldap Integration 3.0.10 Miniorange Active Directory Integration / Ldap Integration 3.0.11 Miniorange Active Directory Integration / Ldap Integration 3.0.12 Miniorange Active Directory Integration / Ldap Integration 3.0.13 Miniorange Active Directory Integration / Ldap Integration 3.5 Miniorange Active Directory Integration / Ldap Integration 3.5.1 Miniorange Active Directory Integration / Ldap Integration 3.5.2 Miniorange Active Directory Integration / Ldap Integration 3.5.3 Miniorange Active Directory Integration / Ldap Integration 3.5.6 Miniorange Active Directory Integration / Ldap Integration 3.5.7 Miniorange Active Directory Integration / Ldap Integration 3.5.8 Miniorange Active Directory Integration / Ldap Integration 3.5.9 Miniorange Active Directory Integration / Ldap Integration 3.6 Miniorange Active Directory Integration / Ldap Integration 3.6.1 Miniorange Active Directory Integration / Ldap Integration 3.6.2 Miniorange Active Directory Integration / Ldap Integration 3.6.3 Miniorange Active Directory Integration / Ldap Integration 3.6.5 Miniorange Active Directory Integration / Ldap Integration 3.6.6 Miniorange Active Directory Integration / Ldap Integration 3.6.8 Miniorange Active Directory Integration / Ldap Integration 3.6.9 Miniorange Active Directory Integration / Ldap Integration 3.6.91 Miniorange Active Directory Integration / Ldap Integration 3.6.92 Miniorange Active Directory Integration / Ldap Integration 3.6.93 Miniorange Active Directory Integration / Ldap Integration 3.6.95 Miniorange Active Directory Integration / Ldap Integration 3.6.96 Miniorange Active Directory Integration / Ldap Integration 3.6.97 Miniorange Active Directory Integration / Ldap Integration 3.6.98 Miniorange Active Directory Integration / Ldap Integration 3.6.99 Miniorange Active Directory Integration / Ldap Integration 3.7 Miniorange Active Directory Integration / Ldap Integration 3.7.1 Miniorange Active Directory Integration / Ldap Integration 3.7.2 Miniorange Active Directory Integration / Ldap Integration 3.7.3 Miniorange Active Directory Integration / Ldap Integration 3.7.4 Miniorange Active Directory Integration / Ldap Integration 3.7.5 Miniorange Active Directory Integration / Ldap Integration 3.7.6 Miniorange Active Directory Integration / Ldap Integration 4.0 Miniorange Active Directory Integration / Ldap Integration 4.0.1 Miniorange Active Directory Integration / Ldap Integration 4.0.3 Miniorange Active Directory Integration / Ldap Integration 4.0.4 Miniorange Active Directory Integration / Ldap Integration 4.0.5 Miniorange Active Directory Integration / Ldap Integration 4.0.7 Miniorange Active Directory Integration / Ldap Integration 4.0.8 Miniorange Active Directory Integration / Ldap Integration 4.1.0 Miniorange Active Directory Integration / Ldap Integration 4.1.3 Miniorange Active Directory Integration / Ldap Integration 4.1.4 Miniorange Active Directory Integration / Ldap Integration 4.1.5 Miniorange Active Directory Integration / Ldap Integration 4.1.6	78

References

https://wpscan.com/vulnerability/91f4e500-71f3-4ef6-9cc7-24a7c12a5748