CVEvulnerability
CVE-2012-2678
1.2 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.2 LOW — AV:L/AC:H/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
Affected configurations
• redhat directory server (<= 8.2)
• redhat directory server 7.1
• redhat directory server 8.0
• redhat directory server 8.1
• fedoraproject 389 directory server (<= 1.2.11.5)
• fedoraproject 389 directory server 1.2.1
• fedoraproject 389 directory server 1.2.2
• fedoraproject 389 directory server 1.2.3
• fedoraproject 389 directory server 1.2.5
• fedoraproject 389 directory server 1.2.6
• fedoraproject 389 directory server 1.2.6.1
• fedoraproject 389 directory server 1.2.7
• fedoraproject 389 directory server 1.2.7.5
• fedoraproject 389 directory server 1.2.8
• fedoraproject 389 directory server 1.2.8.1
• fedoraproject 389 directory server 1.2.8.2
• fedoraproject 389 directory server 1.2.8.3
• fedoraproject 389 directory server 1.2.9.9
• fedoraproject 389 directory server 1.2.10
• fedoraproject 389 directory server 1.2.10.1
• fedoraproject 389 directory server 1.2.10.2
• fedoraproject 389 directory server 1.2.10.3
• fedoraproject 389 directory server 1.2.10.4
• fedoraproject 389 directory server 1.2.10.7
• fedoraproject 389 directory server 1.2.11.1
Related
Weakness · not in database (1)
References
- http://directory.fedoraproject.org/wiki/Release_Notes directory.fedoraproject.org
- http://osvdb.org/83336 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-0997.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1041.html Vendor Advisory
- http://secunia.com/advisories/49734 Vendor Advisory
- http://www.securityfocus.com/bid/54153 www.securityfocus.com
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 h20564.www2.hp.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353 oval.cisecurity.org
- http://directory.fedoraproject.org/wiki/Release_Notes directory.fedoraproject.org
- http://osvdb.org/83336 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-0997.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1041.html Vendor Advisory
- http://secunia.com/advisories/49734 Vendor Advisory
- http://www.securityfocus.com/bid/54153 www.securityfocus.com
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 h20564.www2.hp.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353 oval.cisecurity.org