CVE-2012-2678
1.2
Vector
AV:L/AC:H/Au:N/C:P/I:N/A:N
Exploitability: 1.9 / Impact: 2.9
Source: NVD
Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
Affected (42)
Products: Redhat: Directory Server · Fedoraproject: 389 Directory Server
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 8.2 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.2.11.5 |
Related CWEs
References (16)
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.