1.2

CVE-2012-2678

389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.

Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Directory Server Version <= 8.2
Redhat ≫ Directory Server Version7.1
Redhat ≫ Directory Server Version8.0
Redhat ≫ Directory Server Version8.1
Fedoraproject ≫ 389 Directory Server Version <= 1.2.11.5
Fedoraproject ≫ 389 Directory Server Version1.2.5 Updaterc1
Fedoraproject ≫ 389 Directory Server Version1.2.5 Updaterc2
Fedoraproject ≫ 389 Directory Server Version1.2.5 Updaterc3
Fedoraproject ≫ 389 Directory Server Version1.2.5 Updaterc4
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updatea2
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updatea3
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updatea4
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updaterc1
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updaterc2
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updaterc3
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updaterc6
Fedoraproject ≫ 389 Directory Server Version1.2.6 Updaterc7
Fedoraproject ≫ 389 Directory Server Version1.2.6.1
Fedoraproject ≫ 389 Directory Server Version1.2.7 Updatealpha3
Fedoraproject ≫ 389 Directory Server Version1.2.7.5
Fedoraproject ≫ 389 Directory Server Version1.2.8 Updatealpha1
Fedoraproject ≫ 389 Directory Server Version1.2.8 Updatealpha2
Fedoraproject ≫ 389 Directory Server Version1.2.8 Updatealpha3
Fedoraproject ≫ 389 Directory Server Version1.2.8 Updaterc1
Fedoraproject ≫ 389 Directory Server Version1.2.8 Updaterc2
Fedoraproject ≫ 389 Directory Server Version1.2.8.1
Fedoraproject ≫ 389 Directory Server Version1.2.8.2
Fedoraproject ≫ 389 Directory Server Version1.2.8.3
Fedoraproject ≫ 389 Directory Server Version1.2.9.9
Fedoraproject ≫ 389 Directory Server Version1.2.10 Updatealpha8
Fedoraproject ≫ 389 Directory Server Version1.2.10 Updaterc1
Fedoraproject ≫ 389 Directory Server Version1.2.10.1
Fedoraproject ≫ 389 Directory Server Version1.2.10.2
Fedoraproject ≫ 389 Directory Server Version1.2.10.3
Fedoraproject ≫ 389 Directory Server Version1.2.10.4
Fedoraproject ≫ 389 Directory Server Version1.2.10.7
Fedoraproject ≫ 389 Directory Server Version1.2.11.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.24% 0.468
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 1.2 1.9 2.9
AV:L/AC:H/Au:N/C:P/I:N/A:N