CVE-2026-111347: falha de alta gravidade em opsre go-ldap-admin
go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.2epss 0.5%
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials for reuse.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
opsre · go-ldap-adminCVEs relacionadas — opsre go-ldap-admin
No mesmo produto, das mais perigosas para as menos.
Referências
https://github.com/opsre/go-ldap-adminhttps://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L20-L24https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L76-L77https://github.com/opsre/go-ldap-admin/blob/v0.6.2/logic/base_logic.go#L188-L199https://github.com/opsre/go-ldap-admin/blob/v0.6.2/routes/base_routes.go#L50https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-resethttps://www.vulncheck.com/advisories/go-ldap-admin-through-0.6.2-hard-coded-rsa-private-key-via-base-decryptpwd