CVE-2012-2678

Опубликовано: 03 июл. 2012

Источник: nvd

CVSS2: 1.2

EPSS Низкий

Описание

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:directory_server:*:*:*:*:*:*:*:*

Версия до 8.2 (включая)

cpe:2.3:a:redhat:directory_server:7.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:8.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*

Версия до 1.2.11.5 (включая)

cpe:2.3:a:fedoraproject:389_directory_server:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.5:rc4:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:a4:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc6:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6:rc7:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.7:alpha3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.7.5:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:alpha1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:alpha2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:alpha3:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:rc1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8:rc2:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.9.9:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10:alpha8:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10:rc1:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.1:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.2:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.3:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.4:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.7:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.1:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.00238

Низкий

1.2 Low

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2012-2678

ubuntu

больше 13 лет назад

CVE-2012-2678

redhat

больше 13 лет назад

CVE-2012-2678

debian

больше 13 лет назад

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server bef ...

GHSA-p843-jwrx-ghw2

github

больше 3 лет назад

ELSA-2012-0997

oracle-oval

больше 13 лет назад

ELSA-2012-0997: 389-ds-base security update (MODERATE)

EPSS

Процентиль: 47%

0.00238

Низкий

1.2 Low

CVSS2

Дефекты

CWE-310