The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/91f4e500-71f3-4ef6-9cc7-24a7c12a5748 | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/91f4e500-71f3-4ef6-9cc7-24a7c12a5748 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/91f4e500-71f3-4ef6-9cc7-24a7c12a5748 - Exploit, Third Party Advisory |
07 Nov 2023, 04:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
20 Oct 2023, 18:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://wpscan.com/vulnerability/91f4e500-71f3-4ef6-9cc7-24a7c12a5748 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Miniorange active Directory Integration \/ Ldap Integration
Miniorange |
|
| CPE | cpe:2.3:a:miniorange:active_directory_integration_\/_ldap_integration:*:*:*:*:*:wordpress:*:* |
16 Oct 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-16 20:15
Updated : 2024-11-21 08:40
NVD link : CVE-2023-5003
Mitre link : CVE-2023-5003
CVE.ORG link : CVE-2023-5003
JSON object : View
Products Affected
miniorange
- active_directory_integration_\/_ldap_integration
CWE
No CWE.