CVE-2012-2746

Published Jul 3, 2012

Last updated 7 years ago

Overview

Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
Source
secalert@redhat.com
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
2.1
Impact score
2.9
Exploitability score
3.9
Vector string
AV:N/AC:H/Au:S/C:P/I:N/A:N

Weaknesses

nvd@nist.gov
CWE-310

Configurations