Medium severity6.5NVD Advisory· Published Oct 26, 2023· Updated Jun 17, 2026

CVE-2020-17477

Description

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators to read LDAP password hashes (sambaNTPassword, krb5Key, sambaPasswordHistory, and pwhistory) via LDAP search requests. For example, a teacher can gain administrator access via an NTLM hash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Univention/Ucs\@school
cpe:2.3:a:univention:ucs\@school:*:*:*:*:*:*:*:*
Range: <=4.4
UCS@school/ucs-school-ldap-acls-masterdescription
Univention/ucs-school-ldap-acls-masterllm-create
Range: <4.4v5-errata
Univention/UCS@schoolllm-fuzzy
Range: <4.4v5-errata

Patches

Vulnerability mechanics

References

forge.univention.org/bugzilla/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000