Axxonnet Arp Agent
Monthly
AxxonSoft AxxonNet ARP Agent before 3.25.0 writes the plaintext password of the LDAP directory-service account into WARNING-level log entries on Windows and Linux hosts where LDAP user synchronization is configured. A local attacker with low privileges and read access to ARP Agent logs or generated support packages can recover that password, resulting in high confidentiality impact but no integrity or availability impact. No public exploit was identified at time of analysis, and the issue is not listed in CISA KEV; the risk is moderate and locally scoped rather than an urgent remote-exploitation priority.
AxxonSoft AxxonNet ARP Agent before 3.25.0 writes the plaintext password of the LDAP directory-service account into WARNING-level log entries on Windows and Linux hosts where LDAP user synchronization is configured. A local attacker with low privileges and read access to ARP Agent logs or generated support packages can recover that password, resulting in high confidentiality impact but no integrity or availability impact. No public exploit was identified at time of analysis, and the issue is not listed in CISA KEV; the risk is moderate and locally scoped rather than an urgent remote-exploitation priority.