CVE-2022-25807

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-byte DES key.

• CWE-798

• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0002.mdExploit, Third Party Advisory
• https://www.igel.com/igel-solution-family/universal-management-suite/Product, Vendor Advisory
• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0002.mdExploit, Third Party Advisory
• https://www.igel.com/igel-solution-family/universal-management-suite/Product, Vendor Advisory

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25801Best Practical RT for Incident Response (RTIR) before 4.0.3 …9.1
• CVE-2022-25802Best Practical Request Tracker (RT) before 4.4.6 and 5.x bef…6.1
• CVE-2022-25803Best Practical Request Tracker (RT) before 5.0.3 has an Open…6.1
• CVE-2022-25804An issue was discovered in the IGEL Universal Management Sui…5.5
• CVE-2022-25805An issue was discovered in the IGEL Universal Management Sui…6.5
• CVE-2022-25806An issue was discovered in the IGEL Universal Management Sui…8.8
• CVE-2022-25809Improper Neutralization of audio output from 3rd and 4th Gen…9.8
• CVE-2022-2581Out-of-bounds Read in GitHub repository vim/vim prior to 9.0…7.8
• CVE-2022-25810The Transposh WordPress Translation WordPress plugin through…6.5
• CVE-2022-25811The Transposh WordPress Translation WordPress plugin through…7.2
• CVE-2022-25812The Transposh WordPress Translation WordPress plugin before …7.2
• CVE-2022-25813In Apache OFBiz, versions 18.12.05 and earlier, an attacker …7.5