Published: 09/01/2020 Updated: 29/01/2020

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8

VMScore: 169

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

389 Directory Server prior to 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hp hp-ux directory server
redhat redhat directory server
fedoraproject 389 directory server
redhat directory server 8.0

CWE-312 https://bugzilla.redhat.com/show_bug.cgi?id=625950 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6914 https://git.fedorahosted.org/cgit/389/ds.git/commit/?id=d38ae06 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c02522633&docLocale=en_US https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3282

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect