CVEvulnerability
CVE-2012-2746
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:N/AC:H/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
Affected configurations
• redhat directory server (<= 8.2)
• redhat directory server 7.1
• redhat directory server 8.0
• redhat directory server 8.1
• fedoraproject 389 directory server (<= 1.2.11.5)
• fedoraproject 389 directory server 1.2.1
• fedoraproject 389 directory server 1.2.2
• fedoraproject 389 directory server 1.2.3
• fedoraproject 389 directory server 1.2.5
• fedoraproject 389 directory server 1.2.6
• fedoraproject 389 directory server 1.2.6.1
• fedoraproject 389 directory server 1.2.7
• fedoraproject 389 directory server 1.2.7.5
• fedoraproject 389 directory server 1.2.8
• fedoraproject 389 directory server 1.2.8.1
• fedoraproject 389 directory server 1.2.8.2
• fedoraproject 389 directory server 1.2.8.3
• fedoraproject 389 directory server 1.2.9.9
• fedoraproject 389 directory server 1.2.10
• fedoraproject 389 directory server 1.2.10.1
• fedoraproject 389 directory server 1.2.10.2
• fedoraproject 389 directory server 1.2.10.3
• fedoraproject 389 directory server 1.2.10.4
• fedoraproject 389 directory server 1.2.10.7
• fedoraproject 389 directory server 1.2.11.1
Related
Weakness · not in database (1)
References
- http://directory.fedoraproject.org/wiki/Release_Notes Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0997.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1041.html Vendor Advisory
- http://secunia.com/advisories/49734 Vendor Advisory
- http://www.osvdb.org/83329 www.osvdb.org
- http://www.securityfocus.com/bid/54153 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=833482 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76595 exchange.xforce.ibmcloud.com
- https://fedorahosted.org/389/ticket/365 Vendor Advisory
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 h20564.www2.hp.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19241 oval.cisecurity.org
- http://directory.fedoraproject.org/wiki/Release_Notes Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0997.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1041.html Vendor Advisory
- http://secunia.com/advisories/49734 Vendor Advisory
- http://www.osvdb.org/83329 www.osvdb.org
- http://www.securityfocus.com/bid/54153 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=833482 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76595 exchange.xforce.ibmcloud.com
- https://fedorahosted.org/389/ticket/365 Vendor Advisory
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083 h20564.www2.hp.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19241 oval.cisecurity.org