Lucene search
HistoryJul 31, 2013 - 1:20 p.m.
CVE-2013-2219
red hat
directory server
389 directory server
access restriction
entity attributes
sensitive information
remote authentication
cve-2013-2219
nvd
5.6 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
48.9%
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.
Affected configurations
Node
fedoraproject389_directory_serverMatch-
ORredhatdirectory_serverRange≤8.2
ORredhatdirectory_serverMatch7.1
ORredhatdirectory_serverMatch8.0
ORredhatdirectory_serverMatch8.1
Related
nessus
nessus
Oracle Linux 6 : 389-ds-base (ELSA-2013-1119)
2013-07-31 00:00:00
RHEL 5 : redhat-ds-base (RHSA-2013:1116)
2014-11-08 00:00:00
CentOS 6 : 389-ds-base (CESA-2013:1119)
2013-07-31 00:00:00
openvas
openvas
CentOS Update for 389-ds-base CESA-2013:1119 centos6
2013-08-01 00:00:00
CentOS Update for 389-ds-base CESA-2013:1119 centos6
2013-08-01 00:00:00
RedHat Update for 389-ds-base RHSA-2013:1119-01
2014-05-20 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 08:56:54
centos
centos
389 security update
2013-07-30 18:55:00
debiancve
debiancve
CVE-2013-2219
2013-07-31 13:20:25
oraclelinux
oraclelinux
389-ds-base security and bug fix update
2013-07-30 00:00:00
prion
prion
Design/Logic Flaw
2013-07-31 13:20:00
redhat
redhat
(RHSA-2013:1116) Moderate: redhat-ds-base security and bug fix update
2013-07-30 00:00:00
(RHSA-2013:1119) Moderate: 389-ds-base security and bug fix update
2013-07-30 00:00:00
ubuntucve
ubuntucve
CVE-2013-2219
2013-07-31 00:00:00
cvelist
cvelist
CVE-2013-2219
2013-07-31 10:00:00
nvd
nvd
CVE-2013-2219
2013-07-31 13:20:25
mageia
mageia
amazon
amazon
Important: 389-ds-base
2013-09-19 15:02:00
fedora
fedora
[SECURITY] Fedora 19 Update: 389-ds-base-1.3.1.7-1.fc19
2013-08-30 23:03:14
[SECURITY] Fedora 18 Update: 389-ds-base-1.3.0.8-1.fc18
2013-08-30 22:56:20
[SECURITY] Fedora 19 Update: 389-ds-base-1.3.1.16-1.fc19
2013-12-03 10:31:53
5.6 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
48.9%
Related for CVE-2013-2219