CVE-2021-3825

Critical

Published: 01/10/2021(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In version 2.1.15 and below of the Lider module in LiderAhenk software, configurations are leaking via an unsecured API. An attacker with access to the configurations API could obtain valid LDAP credentials.

Risk Assessment

The exposure of LDAP credentials could lead to unauthorized access to organizational resources, posing a serious threat to data security.

Recommendation

It is recommended to update the LiderAhenk software to a version above 2.1.15 and secure the API to prevent unauthorized access.

Original NVD description (English source)

On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials.