Red Hat Security Advisory

RHSA-2020:0464

389-ds:1.4 security update

Released 2020-02-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v. 8.0) 389-ds-base-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le::389-ds:1.4, 389-ds-base-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.src::389-ds:1.4, 389-ds-base-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64::389-ds:1.4 +9

TI-2019-11029 CVE-2019-14824 · GHSA-8wxh-5wv6-x378

LOW 31

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01306 Published 2019-11-08 Partial fix CWE-732