CVE-2026-121021
MediumCVSS 5.5Summary
Plaintext storage of a password (CWE-256) in the SecurityManager shared configuration of AxxonSoft Axxon One before 3.1.0 allows a local attacker with read access to the configuration directory or backups to obtain the LDAP service account password from the main.conf file.
Risk Assessment
Exposure of the LDAP service account password may enable unauthorized directory access and lateral movement. The risk is especially relevant when configuration backups are stored without adequate protection.
Recommendation
Upgrade Axxon One to version 3.1.0 or later, rotate the LDAP service account password, and secure and sanitize existing configuration files and backups.
Other vulnerabilities in Axxon One
See all- CVE-2026-121022High
Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 allows a remote unauthenticated attacker to log in as the built-in administrator with default credentials on a newly installed system, because the web client did not enforce the mandatory change of the default password on first login.
- CVE-2026-121020Medium
Exposure of sensitive information to an unauthorized actor (CWE-200) in the security configuration API of AxxonSoft Axxon One before 3.2.0 allows a remote authenticated low-privileged user to enumerate all configured users and roles, because the user configuration request returned complete lists regardless of the caller's permissions.
- CVE-2025-10223Medium
Insufficient Session Expiration in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows an authenticated attacker to retain access with removed privileges via continued use of an unexpired session token until natural expiration.
Original NVD description (English source)
Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service account via the main.conf configuration file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS