CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access and above, to change the LDAP server and retrieve the credentials for the original LDAP server.
Explanation of Vulnerability in Simple Terms
Staff/Employee Business Directory for Active Directory versions up to 1.2.3 contain a missing authentication control that allows high-privilege users to access sensitive information. The vulnerability requires network access and high administrative privileges to exploit. Low confidentiality impact is possible, but integrity and availability are not affected.
What an attacker can do
A high-privilege admin can read sensitive directory information over the network.
Potential impact on your site
High-privilege admins could potentially view restricted employee directory data they shouldn't access.
Conditions required to exploit
Attacker must have high-level administrative privileges and network access to the application.
Key dates
External resources
Related vulnerabilities
