CVE-2026-1966
YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UI
概要
YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UI
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web docs.yugabyte.com
- web github.com