Поиск уязвимостей
Количество 25
Количество 25
SUSE-SU-2019:1207-1
Security update for 389-ds
GHSA-pxxp-9p24-326h
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker with sufficiently high privileges, such as root or Directory Manager, can query these files in order to retrieve plaintext passwords.
GHSA-89rw-hgr3-hvfx
A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.
ELSA-2019-3401
ELSA-2019-3401: 389-ds:1.4 security, bug fix, and enhancement update (IMPORTANT)
ELSA-2018-2757
ELSA-2018-2757: 389-ds-base security and bug fix update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2019:1207-1 Security update for 389-ds | больше 7 лет назад | ||
| GHSA-pxxp-9p24-326h 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker with sufficiently high privileges, such as root or Directory Manager, can query these files in order to retrieve plaintext passwords. | CVSS3: 7.2 | 1% Низкий | больше 4 лет назад |
| GHSA-89rw-hgr3-hvfx A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service. | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
| ELSA-2019-3401 ELSA-2019-3401: 389-ds:1.4 security, bug fix, and enhancement update (IMPORTANT) | почти 7 лет назад | ||
| ELSA-2018-2757 ELSA-2018-2757: 389-ds-base security and bug fix update (MODERATE) | около 8 лет назад |
Уязвимостей на страницу