CVE-2024-12510 MEDIUM

CVE-2024-12510: LDAP Authentication Sever Pass-back attack

Vendor Xerox
Product Versalink B400
Weakness CWE-287 · Improper authentication
Published February 3, 2025
Last update February 27, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

Key dates

02Disclosure timeline

February 3, 2025 CVE published
February 27, 2025 Record updated