CyberSecBulletin

Univention vulnerabilities

We track 1 vulnerability in Univention products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2023.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest Univention vulnerabilities

  • 7.8 High severity

    Univention Corporate Server: Exposure of Resource to Wrong Sphere

    CVE-2023-38994Univention

    The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform follo