Lucene search

[email protected]NVD:CVE-2012-2746

HistoryJul 03, 2012 - 4:40 p.m.

CVE-2012-2746

2012-07-0316:40:34

CWE-310

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.002

Percentile

58.5%

JSON

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.

Affected configurations

Nvd

Node

redhatdirectory_serverRange≤8.2

redhatdirectory_serverMatch7.1

redhatdirectory_serverMatch8.0

redhatdirectory_serverMatch8.1

Node

fedoraproject389_directory_serverRange≤1.2.11.5

fedoraproject389_directory_serverMatch1.2.1

fedoraproject389_directory_serverMatch1.2.2

fedoraproject389_directory_serverMatch1.2.3

fedoraproject389_directory_serverMatch1.2.5

fedoraproject389_directory_serverMatch1.2.5rc1

fedoraproject389_directory_serverMatch1.2.5rc2

fedoraproject389_directory_serverMatch1.2.5rc3

fedoraproject389_directory_serverMatch1.2.5rc4

fedoraproject389_directory_serverMatch1.2.6

fedoraproject389_directory_serverMatch1.2.6a2

fedoraproject389_directory_serverMatch1.2.6a3

fedoraproject389_directory_serverMatch1.2.6a4

fedoraproject389_directory_serverMatch1.2.6rc1

fedoraproject389_directory_serverMatch1.2.6rc2

fedoraproject389_directory_serverMatch1.2.6rc3

fedoraproject389_directory_serverMatch1.2.6rc6

fedoraproject389_directory_serverMatch1.2.6rc7

fedoraproject389_directory_serverMatch1.2.6.1

fedoraproject389_directory_serverMatch1.2.7alpha3

fedoraproject389_directory_serverMatch1.2.7.5

fedoraproject389_directory_serverMatch1.2.8alpha1

fedoraproject389_directory_serverMatch1.2.8alpha2

fedoraproject389_directory_serverMatch1.2.8alpha3

fedoraproject389_directory_serverMatch1.2.8rc1

fedoraproject389_directory_serverMatch1.2.8rc2

fedoraproject389_directory_serverMatch1.2.8.1

fedoraproject389_directory_serverMatch1.2.8.2

fedoraproject389_directory_serverMatch1.2.8.3

fedoraproject389_directory_serverMatch1.2.9.9

fedoraproject389_directory_serverMatch1.2.10alpha8

fedoraproject389_directory_serverMatch1.2.10rc1

fedoraproject389_directory_serverMatch1.2.10.1

fedoraproject389_directory_serverMatch1.2.10.2

fedoraproject389_directory_serverMatch1.2.10.3

fedoraproject389_directory_serverMatch1.2.10.4

fedoraproject389_directory_serverMatch1.2.10.7

fedoraproject389_directory_serverMatch1.2.11.1

VendorProductVersionCPE
redhatdirectory_server*cpe:2.3:a:redhat:directory_server:*:*:*:*:*:*:*:*
redhatdirectory_server7.1cpe:2.3:a:redhat:directory_server:7.1:*:*:*:*:*:*:*
redhatdirectory_server8.0cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:*
redhatdirectory_server8.1cpe:2.3:a:redhat:directory_server:8.1:*:*:*:*:*:*:*
fedoraproject389_directory_server*cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*
fedoraproject389_directory_server1.2.1cpe:2.3:a:fedoraproject:389_directory_server:1.2.1:*:*:*:*:*:*:*
fedoraproject389_directory_server1.2.2cpe:2.3:a:fedoraproject:389_directory_server:1.2.2:*:*:*:*:*:*:*
fedoraproject389_directory_server1.2.3cpe:2.3:a:fedoraproject:389_directory_server:1.2.3:*:*:*:*:*:*:*
fedoraproject389_directory_server1.2.5cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:*:*:*:*:*:*:*
fedoraproject389_directory_server1.2.5cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc1:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	directory_server	*	cpe:2.3:a:redhat:directory_server::::::::
redhat	directory_server	7.1	cpe:2.3:a:redhat:directory_server:7.1:::::::*
redhat	directory_server	8.0	cpe:2.3:a:redhat:directory_server:8.0:::::::*
redhat	directory_server	8.1	cpe:2.3:a:redhat:directory_server:8.1:::::::*
fedoraproject	389_directory_server	*	cpe:2.3:a:fedoraproject:389_directory_server::::::::
fedoraproject	389_directory_server	1.2.1	cpe:2.3:a:fedoraproject:389_directory_server:1.2.1:::::::*
fedoraproject	389_directory_server	1.2.2	cpe:2.3:a:fedoraproject:389_directory_server:1.2.2:::::::*
fedoraproject	389_directory_server	1.2.3	cpe:2.3:a:fedoraproject:389_directory_server:1.2.3:::::::*
fedoraproject	389_directory_server	1.2.5	cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:::::::*
fedoraproject	389_directory_server	1.2.5	cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc1::::::