Red Hat Security AdvisoryRHSA-2012:1041
redhat-ds-base security update
Released 2012-06-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Directory Server 8 (for RHEL 5 Server) redhat-ds-base-8.2.10-3.el5dsrv, redhat-ds-base-8.2.10-3.el5dsrv.i386, redhat-ds-base-devel-8.2.10-3.el5dsrv +1
Fixes 2 records
Priority LOW 14
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which…
CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.01314 · Published 2012-07-03 · Partial fix CWE-310
Priority LOW 9
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00636 · Published 2012-07-03 · Fixed CWE-310
