Liderahenk
Monthly
LDAP Injection in Liderahenk, TÜBİTAK BİLGEM's centralized Linux management platform, enables unauthenticated remote attackers to manipulate LDAP queries and extract sensitive directory data - including user accounts, credentials, and organizational attributes - from the underlying directory service. Affected versions span 3.4.0 through 3.5.4. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the low-complexity unauthenticated attack vector makes this accessible to a wide range of threat actors targeting Turkish public sector infrastructure.
Hard-coded credentials in TÜBİTAK BİLGEM's Liderahenk Linux endpoint management platform (all versions before 3.5.5) let a remote, unauthenticated attacker log in using built-in default/common username-password pairs, yielding an authentication bypass with high confidentiality and integrity impact. Because Liderahenk centrally administers fleets of Pardus/Linux clients, valid access to its management interface exposes managed-endpoint policies and configuration. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw was reported by Turkey's national CERT (TR-CERT).
On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. Rated critical severity (CVSS 9.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
LDAP Injection in Liderahenk, TÜBİTAK BİLGEM's centralized Linux management platform, enables unauthenticated remote attackers to manipulate LDAP queries and extract sensitive directory data - including user accounts, credentials, and organizational attributes - from the underlying directory service. Affected versions span 3.4.0 through 3.5.4. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the low-complexity unauthenticated attack vector makes this accessible to a wide range of threat actors targeting Turkish public sector infrastructure.
Hard-coded credentials in TÜBİTAK BİLGEM's Liderahenk Linux endpoint management platform (all versions before 3.5.5) let a remote, unauthenticated attacker log in using built-in default/common username-password pairs, yielding an authentication bypass with high confidentiality and integrity impact. Because Liderahenk centrally administers fleets of Pardus/Linux clients, valid access to its management interface exposes managed-endpoint policies and configuration. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw was reported by Turkey's national CERT (TR-CERT).
On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. Rated critical severity (CVSS 9.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.