Information Disclosure

2019-01-1508:58:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

70.3%

JSON

389-ds-base is vulnerable to information disclosure attacks. The vulnerability exists as Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

CPENameOperatorVersion
389-ds-baseeq1.2.11.15__14.el6_4
389-ds-baseeq1.2.11.15__30.el6_5
389-ds-baseeq1.2.11.15__31.el6_5
389-ds-baseeq1.2.10.2__18.el6_3
389-ds-baseeq1.2.11.15__20.el6_4
389-ds-baseeq1.2.10.2__20.el6_3
389-ds-baseeq1.2.11.15__11.el6
389-ds-baseeq1.2.11.15__29.el6
389-ds-baseeq1.2.11.15__32.el6_5
389-ds-baseeq1.2.11.15__12.el6_4

Name	Operator	Version
389-ds-base	eq	1.2.11.15__14.el6_4
389-ds-base	eq	1.2.11.15__30.el6_5
389-ds-base	eq	1.2.11.15__31.el6_5
389-ds-base	eq	1.2.10.2__18.el6_3
389-ds-base	eq	1.2.11.15__20.el6_4
389-ds-base	eq	1.2.10.2__20.el6_3
389-ds-base	eq	1.2.11.15__11.el6
389-ds-base	eq	1.2.11.15__29.el6
389-ds-base	eq	1.2.11.15__32.el6_5
389-ds-base	eq	1.2.11.15__12.el6_4