6.5
Moyenne
CVE-2019-14824 A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute…
Description
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 389-ds-base | Versions non publiées |
Références
- RHSA-2019:3981 access.redhat.com
- [debian-lts-announce] 20191129 [SECURITY] [DLA 2004-1] 389-ds-base security update lists.debian.org
- RHSA-2020:0464 access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- lists.debian.org lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de 389-ds-base
Les 5 CVE de 389-ds-base →
CVE-2018-14624
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16
7.5
Élevée
CVE-2018-10871
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information
3.8
Faible
CVE-2017-2668
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind…
6.5
Moyenne
CVE-2018-10850
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles…
5.9
Moyenne