CVE-2013-2219

389 Directory Server and Red Hat Directory Server < 8.2 - Authenticated Information Disclosure via Search Query

Title source: llm
STIX 2.1

Description

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1119.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1116.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=979508

Scores

EPSS 0.0176
EPSS Percentile 75.6%

Details

CWE
CWE-264
Status published
Products (5)
fedoraproject/389_directory_server
redhat/directory_server 7.1
redhat/directory_server 8.0
redhat/directory_server 8.1
redhat/directory_server < 8.2
Published Jul 31, 2013
Tracked Since Feb 18, 2026