EUVD-2026-41848
GHSA-8jh8-wh5v-2wh3
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent-only access and high privileges required; scope changes because downstream SMTP/LDAP credentials are exposed, with low confidentiality impact on those subsequent systems.
Primary rating from Vendor (Canon_EMEA).
CVSS VectorVendor: Canon_EMEA
Lifecycle Timeline
1DescriptionCVE.org
uniFLOW Universal Login Manager (ULM) Standalone contains an information disclosure vulnerability that may allow an authenticated administrator to access sensitive configuration information through the ULM Remote User Interface (RUI). Exploitation requires administrative privileges and may disclose configuration data associated with SMTP or LDAP integrations. ULM deployments connected to uniFLOW Server or uniFLOW Online are not affected.
AnalysisAI
Information disclosure in uniFLOW Universal Login Manager (ULM) Standalone exposes sensitive SMTP and LDAP integration configuration data to authenticated administrators via the Remote User Interface (RUI). The flaw, classified under CWE-522 (Insufficiently Protected Credentials), applies exclusively to Standalone ULM deployments - environments integrated with uniFLOW Server or uniFLOW Online are explicitly confirmed unaffected. No public exploit code has been identified at time of analysis, and exploitation requires high-privilege access on an adjacent network, substantially limiting real-world risk.
Technical ContextAI
uniFLOW ULM (Universal Login Manager) is an enterprise print authentication solution developed by NT-ware, a Canon subsidiary, used to manage user authentication at multifunction printers and copiers. The Standalone deployment mode operates independently of the uniFLOW Server or uniFLOW Online backend platforms. The Remote User Interface (RUI) is an administrative web interface for managing ULM configuration. CWE-522 (Insufficiently Protected Credentials) indicates that credentials or secrets - here specifically SMTP and LDAP integration settings - are stored or transmitted in a manner that allows a privileged user to retrieve them in cleartext or insufficiently protected form through the RUI. The affected CPE is cpe:2.3:a:nt-ware:uniflow_ulm_(universal_login_manager)_standalone:*:*:*:*:*:*:*:*, with a wildcard version range indicating all known versions of the Standalone product are affected. The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:H) confirms adjacent-network access and high privilege as prerequisites.
RemediationAI
Consult the NT-ware security advisory at https://ntware.atlassian.net/wiki/spaces/SA/pages/13659504652/2026+Security+Advisory+ULM+Potential+Information+Disclosure and the Canon PSIRT page at https://www.canon-europe.com/psirt/advisory-information for vendor-released patch or upgrade guidance - no exact fixed version number was provided in available data, so the patched release must be confirmed directly from the vendor. As a compensating control, restrict administrative access to the ULM Remote User Interface to the minimum necessary personnel and enforce strong, unique credentials for RUI administrator accounts to limit insider-threat exposure. Additionally, rotate SMTP relay and LDAP bind credentials stored in ULM configuration as a precaution, since those are the sensitive values at risk of disclosure. Migrating Standalone deployments to uniFLOW Server or uniFLOW Online-integrated architectures eliminates the vulnerability entirely per vendor confirmation.
Same weakness CWE-522 – Insufficiently Protected Credentials
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today