Red Hat Security AdvisoryRHSA-2015:0628
389-ds-base security, bug fix, and enhancement update
Released 2015-03-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.11.15-50.el6_6, 389-ds-base-devel-1.2.11.15-50.el6_6, 389-ds-base-libs-1.2.11.15-50.el6_6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.11.15-50.el6_6, 389-ds-base-devel-1.2.11.15-50.el6_6, 389-ds-base-libs-1.2.11.15-50.el6_6
- Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.11.15-50.el6_6, 389-ds-base-libs-1.2.11.15-50.el6_6
- Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-devel-1.2.11.15-50.el6_6
- Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.11.15-50.el6_6, 389-ds-base-libs-1.2.11.15-50.el6_6
- Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-devel-1.2.11.15-50.el6_6
Fixes 1 record
Priority LOW 27
389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02108 · Published 2015-03-10 · Fixed CWE-200
