Information Disclosure in uniFLOW Universal Login Manager

Executive Summary

CVE-2026-1433 is an information disclosure vulnerability in the uniFLOW Universal Login Manager (ULM) Standalone software. It allows an authenticated administrator with management rights to access sensitive configuration information through the ULM Remote User Interface (RUI). This vulnerability specifically affects ULM running in standalone mode when it is configured to connect to an LDAP server. It does not affect ULM deployments connected to uniFLOW Server or uniFLOW Online.

Exploitation requires administrative privileges, limiting the exposure to users who already have high-level access. The disclosed information may include configuration data related to SMTP or LDAP integrations.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to the exposure of sensitive configuration information if an attacker has administrative access to the ULM Standalone system. Such information could include details about SMTP or LDAP integrations, which might be leveraged for further attacks or unauthorized access.

However, since exploitation requires administrative privileges, the risk is limited to users who already have significant access rights. Additionally, the vulnerability only affects ULM in standalone mode with LDAP configuration, which is not a common setup.

Users are advised to update to ULM version 5.11 or later to fix this issue or consider disconnecting ULM from the LDAP server as a mitigation, though this may affect usability.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability affects uniFLOW Universal Login Manager (ULM) Standalone installations that are configured with LDAP integration and running version 5.10 or earlier.

Detection involves verifying if your ULM deployment is running in standalone mode, checking the version of ULM, and confirming if it is bound to an LDAP server.

Since exploitation requires administrative access to the ULM Remote User Interface, commands or network scans alone may not directly detect the vulnerability.

Suggested steps include:

• Log into the ULM admin interface and check the version number to see if it is 5.10 or earlier.
• Check the ULM configuration to determine if it is operating in standalone mode and if it is connected to an LDAP server.
• Review access logs for any unusual administrative access attempts to the ULM Remote User Interface.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include updating the ULM software to version 5.11 or later, where the vulnerability is fixed.

If updating is not immediately possible, disconnecting the ULM from the LDAP server can mitigate the risk, although this may impact usability.

It is recommended to discuss the impact of disconnecting LDAP with a Canon representative or Canon Business Partner before proceeding.

Additionally, ensure that only trusted administrators have access to the ULM Remote User Interface to reduce the risk of exploitation.

Useful 0 Not Useful 0