PT-2015-4002 · Red Hat+1 · 389 Directory Server+2

Publicado

2015-03-05

·

Atualizado

2024-06-15

·

CVE-2014-8105

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.3.2 before 1.3.2.27 389 Directory Server versions 1.3.3 before 1.3.3.9
Description The issue allows remote attackers to obtain sensitive information from the changelog via unspecified vectors due to improper access restriction to the "cn=changelog" LDAP sub-tree.
Recommendations For 389 Directory Server versions 1.3.2 before 1.3.2.27, update to version 1.3.2.27 or later. For 389 Directory Server versions 1.3.3 before 1.3.3.9, update to version 1.3.3.9 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CESA-2015_0416
CVE-2014-8105
MGASA-2015-0108
OPENSUSE-SU-2024:10157-1
RHSA-2015:0416
RHSA-2015:0628
RHSA-2015_0416
RHSA-2015_0628

Produtos afetados

389 Directory Server
Centos
Red Hat