Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-121021

Plaintext Storage of LDAP Password in Axxon One Shared Configuration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AxxonSoft

Description

Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service account via the main.conf configuration file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AxxonSoft Axxon One

Default version status: unaffected

  • 0 to < 3.1.0affected

References