CVE-2023-33254
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain.
Risk Assessment
An attacker who captures these credentials may gain unauthorized access to resources in Active Directory, posing a significant security risk to the organization.
Recommendation
It is recommended to update the appliances to the latest version and to monitor and restrict access to user authentication settings to prevent exploitation of this vulnerability.
Original NVD description (English source)
There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication settings to specify an attacker-controlled LDAP server, clicks the Test Settings button, and captures the cleartext credentials.