Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2015/03/05 9:26 a.m.8 views

389-ds-base: password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off

It was found that when the nsslapd-unhashed-pw-switch 389 Directory Server configuration option was set to "off", it did not prevent the writing of unhashed passwords into the Changelog. This could potentially allow an authenticated user able to access the Changelog to read sensitive information...

4CVSS5.7AI score0.01692EPSS
SaveExploits0References4
Rows per page
Query Builder