Information disclosure

2015-03-1014:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

JSON

389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the “cn=changelog” LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors.

CPENameOperatorVersion
389_directory_serverle1.3.2.26
389_directory_servereq1.3.3.0
389_directory_servereq1.3.3.5
389_directory_servereq1.3.3.2
389_directory_servereq1.3.3.3
389_directory_servereq1.3.3.8
fedoraeq22

Name	Operator	Version
389_directory_server	le	1.3.2.26
389_directory_server	eq	1.3.3.0
389_directory_server	eq	1.3.3.5
389_directory_server	eq	1.3.3.2
389_directory_server	eq	1.3.3.3
389_directory_server	eq	1.3.3.8
fedora	eq	22