CVE-2018-10327

PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cps_config.xml file.

Score

CVSS 3.0 7.0 High

Status

Modified - cve@mitre.org

Published

2018-05-17

Last modified

2024-08-05

Weaknesses

CWE-522

Affected products

• Printeron (Printeron)

References

• https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-10327