CVE-2018-17944 in Deviceinfo

Zusammenfassung

von MITRE

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

03.10.2018

Moderieren

akzeptiert

Eintrag

VDB-131584

CPE

bereit

EPSS

0.00281

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!