CVE-2014-3562

389 Directory Server - Exposure of Sensitive Replicated Metadata via Directory Search

Title source: llm
STIX 2.1

Description

Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-1031.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1123477
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-1032.html

Scores

EPSS 0.0220
EPSS Percentile 80.4%

Details

CWE
CWE-200
Status published
Products (32)
fedoraproject/389_directory_server 1.2.1
fedoraproject/389_directory_server 1.2.2
fedoraproject/389_directory_server 1.2.3
fedoraproject/389_directory_server 1.2.5 (5 CPE variants)
fedoraproject/389_directory_server 1.2.6 (9 CPE variants)
fedoraproject/389_directory_server 1.2.6.1
fedoraproject/389_directory_server 1.2.7 alpha3
fedoraproject/389_directory_server 1.2.7.5
fedoraproject/389_directory_server 1.2.8 alpha1 (5 CPE variants)
fedoraproject/389_directory_server 1.2.8.1
... and 22 more
Published Aug 21, 2014
Tracked Since Feb 18, 2026