專案資訊 #1065
進行中專案資訊 #1064: 2025-PenTest
Cleartext Passwords Stored in Domain Attributes
100%
概述
NNN bookmark20250526222819601367469548 "Cleartext Passwords Stored in Domain Attributes
Several users, including domain admins, store their passwords in cleartext in domain attributes.
" "Attackers getting access to the domain could potentially find the cleartext passwords and perform user impersonation or privilege escalation easily.
Although specific tools are required to read the domain attributes, a pertinent tool is readily available in a network share that is accessible to all domain users.
" "Avoid storing passwords in domain attributes.
Regularly audit domain attributes for any stored passwords or sensitive information.
" "Status: Open
CVSS-Score: 9.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Fix Difficulty: Quick Win
" "tahoho.com.tw
Attributes: info, scriptPath"
檔案
