Red Hat Security AdvisoryRHSA-2013:1119
389-ds-base security and bug fix update
Released 2013-07-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.11.15-20.el6_4, 389-ds-base-devel-1.2.11.15-20.el6_4, 389-ds-base-libs-1.2.11.15-20.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.11.15-20.el6_4, 389-ds-base-devel-1.2.11.15-20.el6_4, 389-ds-base-libs-1.2.11.15-20.el6_4
- Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.11.15-20.el6_4, 389-ds-base-libs-1.2.11.15-20.el6_4
- Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-1.2.11.15-20.el6_4, 389-ds-base-devel-1.2.11.15-20.el6_4
- Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.11.15-20.el6_4, 389-ds-base-libs-1.2.11.15-20.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-1.2.11.15-20.el6_4, 389-ds-base-devel-1.2.11.15-20.el6_4
Fixes 1 record
Priority LOW 22
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01756 · Published 2013-07-31 · Fixed CWE-264
