CVE-2013-2219

Published: Jul 31, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.

Affected (5)

Products: Fedoraproject: 389 Directory Server · Redhat: Directory Server

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject 389 Directory Server	All versions
Redhat Directory Server	Up to 8.2
Redhat Directory Server	Version 7.1
Redhat Directory Server	Version 8.0
Redhat Directory Server	Version 8.1

Related CWEs

CWE-264

References (6)

http://rhn.redhat.com/errata/RHSA-2013-1116.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1119.html

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=979508

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1116.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1119.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=979508

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.