CVE-2010-3282

2020-01-0920:52:18

www.cve.org

AI Score

3.5

Confidence

High

EPSS

Percentile

5.1%

JSON

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.

CNA Affected

[
  {
    "product": "389 Directory Server",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.2.7.1"
      }
    ]
  },
  {
    "product": "HP-UX Directory Server",
    "vendor": "HP",
    "versions": [
      {
        "status": "affected",
        "version": "before B.08.10.03"
      }
    ]
  }
]