CVE-2016-10512

Critical

Published: 30/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MultiTech FaxFinder before version 4.1.2 stores passwords in an unencrypted form for the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.

Risk Assessment

Storing passwords in an unencrypted form poses a risk of exposure, which could lead to unauthorized access to the LDAP system and other organizational resources.

Recommendation

It is recommended to upgrade to version 4.1.2 or later to ensure that passwords are stored securely. Additionally, consider implementing further security measures for the LDAP configuration.

Original NVD description (English source)

MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext.