Skip to content
Sign in
4.3 Medium

CVE-2019-10224 A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3

Description

A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An attacker, able to see the screen or record the terminal standard error output, could use this flaw to gain sensitive information.

Affected products and versions

Product Affected versions Fixed in
389-ds-base Versions not published

Other CVEs of 389-ds-base

The 3 CVEs of 389-ds-base →
CVE-2019-3883 In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads 5.3 Medium CVE-2018-10935 A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with… 6.5 Medium
Track this CVE