Red Hat Security Advisory

RHSA-2019:3981

389-ds-base security and bug fix update

Released 2019-11-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.9.1-12.el7_7, 389-ds-base-devel-1.3.9.1-12.el7_7, 389-ds-base-libs-1.3.9.1-12.el7_7 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.9.1-12.el7_7, 389-ds-base-devel-1.3.9.1-12.el7_7, 389-ds-base-libs-1.3.9.1-12.el7_7 +1
Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.9.1-12.el7_7, 389-ds-base-libs-1.3.9.1-12.el7_7
Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.9.1-12.el7_7, 389-ds-base-devel-1.3.9.1-12.el7_7, 389-ds-base-libs-1.3.9.1-12.el7_7 +1
Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.9.1-12.el7_7, 389-ds-base-libs-1.3.9.1-12.el7_7
Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.9.1-12.el7_7, 389-ds-base-snmp-1.3.9.1-12.el7_7

TI-2019-11029 CVE-2019-14824 · GHSA-8wxh-5wv6-x378

LOW 31

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01306 Published 2019-11-08 Partial fix CWE-732