PT-2022-3280 · Php+1 · Php Openssl Extension+1

Arseniy Sharoglazov · Published 2022-06-16 · Updated 2023-06-29 · CVE-2022-31085

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LDAP Account Manager versions prior to 8.0

Description The issue is related to the lack of protection for confidential information in the LDAP Account Manager web application. Exploitation of this issue may allow an attacker to obtain LDAP authentication credentials. The problem arises when the PHP OpenSSL extension is not installed or encryption is disabled by configuration, causing session files to include the LDAP user name and password in clear text.

Recommendations For versions prior to 8.0, install the PHP OpenSSL extension and ensure session encryption is enabled in the LAM main configuration. For versions prior to 8.0 where an upgrade is not possible, install the PHP OpenSSL extension and make sure session encryption is enabled in LAM main configuration. Upgrade to version 8.0 or later to resolve the issue.

Exploit

Fix

Missing Encryption of Sensitive Data

Insufficiently Protected Credentials

Using Hardcoded Credentials

Weakness Enumeration

CWE-311

CWE-522

CWE-798

Related Identifiers

BDU:2022-04004

CVE-2022-31085

DSA-5177-1

GHSA-6M3Q-5C84-6H6J

Affected Products

Ldap Account Manager

Php Openssl Extension

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31085.json · Exploit
• https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-31085 · Vendor Advisory
• https://debian.org/security/2022/dsa-5177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31085 · Security Note
• https://ubuntu.com/security/CVE-2022-31085 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04004 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31085 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31085 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5177-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-31085 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-31085 · Security Note
• https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6m3q-5c84-6h6j · Note
• https://t.me/cvenotify/32659 · Telegram Post
• https://t.me/cibsecurity/45238 · Telegram Post