CVE-2018-17944 Information disclosure in n/a
A malicious administrator can capture LDAP or SMTP credentials by changing the server hostname, as stored credentials are not deleted.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-17944?
CVE-2018-17944 is a medium-severity vulnerability in n/a, published on 12 Mar 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.
Weakness: CWE-200
Which versions are affected by CVE-2018-17944?
It affects 8 products.
Products include Lexmark Cx725h Firmware, Lexmark Cx820 Firmware, Lexmark Cx825 Firmware, Lexmark Cx860 Firmware, Lexmark Xc4150 Firmware, Lexmark Xc6152 Firmware and 2 more.
How do I fix CVE-2018-17944?
No fix has been published for CVE-2018-17944 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-17944 being exploited?
There is no known exploitation of CVE-2018-17944 in the wild and no public exploit code.
Sources
Also known as GHSA-j9fc-qr37-r7w7.