Home

CVE-2019-10224

Description

A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An attacker, able to see the screen or record the terminal standard error output, could use this flaw to gain sensitive information.

Risk Information

Base Score
4.6
MODERATE
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.052

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2019:3401) 389-ds:1.4 security, bug fix, and enhancement update 389-ds-base-1.4.1.3-7.module+el8.1.0+4150+5b8c2c1f.x86_64.rpmLinux
(RHSA-2019:3401) 389-ds:1.4 security, bug fix, and enhancement update 389-ds-base-debugsource-1.4.1.3-7.module+el8.1.0+4150+5b8c2c1f.x86_64.rpmLinux
(RHSA-2019:3401) 389-ds:1.4 security, bug fix, and enhancement update 389-ds-base-devel-1.4.1.3-7.module+el8.1.0+4150+5b8c2c1f.x86_64.rpmLinux
(RHSA-2019:3401) 389-ds:1.4 security, bug fix, and enhancement update 389-ds-base-legacy-tools-1.4.1.3-7.module+el8.1.0+4150+5b8c2c1f.x86_64.rpmLinux
(RHSA-2019:3401) 389-ds:1.4 security, bug fix, and enhancement update 389-ds-base-libs-1.4.1.3-7.module+el8.1.0+4150+5b8c2c1f.x86_64.rpmLinux
(RHSA-2019:3401) 389-ds:1.4 security, bug fix, and enhancement update 389-ds-base-snmp-1.4.1.3-7.module+el8.1.0+4150+5b8c2c1f.x86_64.rpmLinux
(RHSA-2019:3401) 389-ds:1.4 security, bug fix, and enhancement update python3-lib389-1.4.1.3-7.module+el8.1.0+4150+5b8c2c1f.noarch.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234