CVE-2022-25804

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for the UMS superuser.

• CWE-276

• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0002.mdExploit, Third Party Advisory
• https://www.igel.com/igel-solution-family/universal-management-suite/Product, Vendor Advisory
• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0002.mdExploit, Third Party Advisory
• https://www.igel.com/igel-solution-family/universal-management-suite/Product, Vendor Advisory

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25799An open redirect vulnerability exists in CERT/CC VINCE softw…6.1
• CVE-2022-2580Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
• CVE-2022-25800Best Practical RT for Incident Response (RTIR) before 4.0.3 …9.1
• CVE-2022-25801Best Practical RT for Incident Response (RTIR) before 4.0.3 …9.1
• CVE-2022-25802Best Practical Request Tracker (RT) before 4.4.6 and 5.x bef…6.1
• CVE-2022-25803Best Practical Request Tracker (RT) before 5.0.3 has an Open…6.1
• CVE-2022-25805An issue was discovered in the IGEL Universal Management Sui…6.5
• CVE-2022-25806An issue was discovered in the IGEL Universal Management Sui…8.8
• CVE-2022-25807An issue was discovered in the IGEL Universal Management Sui…5.5
• CVE-2022-25809Improper Neutralization of audio output from 3rd and 4th Gen…9.8
• CVE-2022-2581Out-of-bounds Read in GitHub repository vim/vim prior to 9.0…7.8
• CVE-2022-25810The Transposh WordPress Translation WordPress plugin through…6.5