NuytsTech Security

CVE-2019-14824

by ·

A flaw was found in the ‘deref’ plugin of 389-ds-base where it could use the ‘search’ permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

Date published : 2019-11-08

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14824

https://lists.debian.org/debian-lts-announce/2019/11/msg00036.html

Tags: