Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
References (11)
Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/83329
Vendor Advisory x_refsource_confirm
https://fedorahosted.org/389/ticket/365
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/49734
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/76595
Various Sources vendor-advisory
x_refsource_hp
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/54153
Vendor Advisory x_refsource_confirm
http://directory.fedoraproject.org/wiki/Release_Notes
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1041.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0997.html
Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=833482
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19241
Scores
EPSS
0.0133
EPSS Percentile
68.1%
Details
CWE
CWE-310
Status
published
Products (25)
fedoraproject/389_directory_server
1.2.1
fedoraproject/389_directory_server
1.2.2
fedoraproject/389_directory_server
1.2.3
fedoraproject/389_directory_server
1.2.5 (5 CPE variants)
fedoraproject/389_directory_server
1.2.6 (9 CPE variants)
fedoraproject/389_directory_server
1.2.6.1
fedoraproject/389_directory_server
1.2.7 alpha3
fedoraproject/389_directory_server
1.2.7.5
fedoraproject/389_directory_server
1.2.8 alpha1 (5 CPE variants)
fedoraproject/389_directory_server
1.2.8.1
... and 15 more
Published
Jul 03, 2012
Tracked Since
Feb 18, 2026