389-ds-base: CVE-2019-14824: Read permission check bypass via the deref plugin

Debian Bug report logs - #944150
389-ds-base: CVE-2019-14824: Read permission check bypass via the deref plugin

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: 389-ds-base: CVE-2019-14824: Read permission check bypass via the deref plugin

Date: Tue, 05 Nov 2019 07:22:06 +0100

Source: 389-ds-base
Version: 1.4.1.6-4
Severity: grave
Tags: security upstream

Hi,

The following vulnerability was published for 389-ds-base.

CVE-2019-14824[0]:
Read permission check bypass via the deref plugin

Note that [1] gives [2] as external reference, but there I get a 404
page not found. Not sure if the issue is marked private or the
reference is wrong.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-14824
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14824
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1747448
[2] https://pagure.io/freeipa/issue/8050

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Send a report that this bug log contains spam.