ByteOS Network

NVD Vulnerability Details :

CVE-2023-38994

Modified

Source-cve@mitre.org

Published At-31 Oct, 2023 | 12:15

Updated At-15 Apr, 2025 | 22:15

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform followup attacks. By default, the configuration of UCS does not allow local ssh access for regular users.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.9	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CPE Matches

univention>>univention_corporate_server>>5.0

cpe:2.3:o:univention:univention_corporate_server:5.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-668	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://forge.univention.org/bugzilla/show_bug.cgi?id=56324	cve@mitre.org	Issue Tracking Vendor Advisory
https://forge.univention.org/bugzilla/show_bug.cgi?id=56324#c0	cve@mitre.org	Issue Tracking Vendor Advisory
https://raeph123.github.io/BlogPosts/Univention/Simple_yet_effective_The_story_of_some_simple_bugs_that_led_to_the_complete_compromise_of_a_network_en.html	cve@mitre.org	N/A
https://www.drive-byte.de/en/blog/simple-yet-effective-the-story-of-some-simple-bugs-that-led-to-the-complete-compromise-of-a-network	cve@mitre.org	Exploit Technical Description Third Party Advisory
https://forge.univention.org/bugzilla/show_bug.cgi?id=56324	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Vendor Advisory
https://forge.univention.org/bugzilla/show_bug.cgi?id=56324#c0	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Vendor Advisory
https://www.drive-byte.de/en/blog/simple-yet-effective-the-story-of-some-simple-bugs-that-led-to-the-complete-compromise-of-a-network	af854a3a-2127-422b-91ae-364da2661108	Exploit Technical Description Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History