PT-2018-10155 · Red Hat+3 · 389-Ds-Base+4

Laura Pardo

·

Publicado

2018-07-18

·

Atualizado

2024-06-15

·

CVE-2018-10871

CVSS v3.1

7.2

Alta

VetorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions 389-ds-base versions prior to 1.3.8.5 389-ds-base versions prior to 1.4.0.12
Description The issue concerns the storage of sensitive information in cleartext. By default, when the Replica and/or retroChangeLog plugins are enabled, passwords are stored in plaintext format in their respective changelog files. An attacker with high privileges can query these files to retrieve plaintext passwords.
Recommendations For versions prior to 1.3.8.5, update to version 1.3.8.5 or later. For versions prior to 1.4.0.12, update to version 1.4.0.12 or later.

Correção

Cleartext Storage of Sensitive Information

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

ALT-PU-2018-2148
CESA-2019_3401
CVE-2018-10871
DLA-1483-1
MGASA-2019-0411
OPENSUSE-SU-2024:10593-1
RHSA-2019:3401
RHSA-2019_3401
SUSE-SU-2019:2155-1

Produtos afetados

389-Ds-Base
Alt Linux
Centos
Red Hat
Suse