ID CVE-2019-14824
Summary A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.
References
Vulnerable Configurations
  • cpe:2.3:a:fedoraproject:389_directory_server:-:*:*:*:*:*:*:*
    cpe:2.3:a:fedoraproject:389_directory_server:-:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
CVSS
Base: 3.5
Impact:
Exploitability:
CWE CWE-416
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 08-11-2019 - 15:22
Published 08-11-2019 - 15:15
Last modified 26-11-2019 - 17:15
Back to Top