專案資訊 #1065
進行中專案資訊 #1064: 2025-PenTest
Cleartext Passwords Stored in Domain Attributes
100%
概述
NNN bookmark20250526222819601367469548 "Cleartext Passwords Stored in Domain Attributes
Several users, including domain admins, store their passwords in cleartext in domain attributes.
" "Attackers getting access to the domain could potentially find the cleartext passwords and perform user impersonation or privilege escalation easily.
Although specific tools are required to read the domain attributes, a pertinent tool is readily available in a network share that is accessible to all domain users.
" "Avoid storing passwords in domain attributes.
Regularly audit domain attributes for any stored passwords or sensitive information.
" "Status: Open
CVSS-Score: 9.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Fix Difficulty: Quick Win
" "tahoho.com.tw
Attributes: info, scriptPath"
檔案
是由 益利 周 於 2 個月 前更新
- 檔案 clipboard-202511121400-qb9lr.png clipboard-202511121400-qb9lr.png 已新增
- 檔案 clipboard-202511121400-m2mvt.png clipboard-202511121400-m2mvt.png 已新增
- 狀態 從 New-新增 變更為 In process-進行中
修正前
是由 益利 周 於 2 個月 前更新
- 檔案 clipboard-202511121402-ygxdf.png clipboard-202511121402-ygxdf.png 已新增
- 檔案 clipboard-202511121403-urzvw.png clipboard-202511121403-urzvw.png 已新增
- 完成百分比 從 0 變更為 100
修正後
