4

CVE-2014-8112

389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.

Data is provided by the National Vulnerability Database (NVD)
Fedoraproject ≫ 389 Directory Server Version1.3.1.0
Fedoraproject ≫ 389 Directory Server Version1.3.1.1
Fedoraproject ≫ 389 Directory Server Version1.3.1.2
Fedoraproject ≫ 389 Directory Server Version1.3.1.3
Fedoraproject ≫ 389 Directory Server Version1.3.1.4
Fedoraproject ≫ 389 Directory Server Version1.3.1.5
Fedoraproject ≫ 389 Directory Server Version1.3.1.6
Fedoraproject ≫ 389 Directory Server Version1.3.1.7
Fedoraproject ≫ 389 Directory Server Version1.3.1.8
Fedoraproject ≫ 389 Directory Server Version1.3.1.9
Fedoraproject ≫ 389 Directory Server Version1.3.1.10
Fedoraproject ≫ 389 Directory Server Version1.3.1.11
Fedoraproject ≫ 389 Directory Server Version1.3.1.12
Fedoraproject ≫ 389 Directory Server Version1.3.1.13
Fedoraproject ≫ 389 Directory Server Version1.3.1.14
Fedoraproject ≫ 389 Directory Server Version1.3.1.15
Fedoraproject ≫ 389 Directory Server Version1.3.1.16
Fedoraproject ≫ 389 Directory Server Version1.3.1.17
Fedoraproject ≫ 389 Directory Server Version1.3.1.18
Fedoraproject ≫ 389 Directory Server Version1.3.1.19
Fedoraproject ≫ 389 Directory Server Version1.3.1.22
Fedoraproject ≫ 389 Directory Server Version1.3.2.2
Fedoraproject ≫ 389 Directory Server Version1.3.2.3
Fedoraproject ≫ 389 Directory Server Version1.3.2.4
Fedoraproject ≫ 389 Directory Server Version1.3.2.5
Fedoraproject ≫ 389 Directory Server Version1.3.2.6
Fedoraproject ≫ 389 Directory Server Version1.3.2.7
Fedoraproject ≫ 389 Directory Server Version1.3.2.8
Fedoraproject ≫ 389 Directory Server Version1.3.2.9
Fedoraproject ≫ 389 Directory Server Version1.3.2.10
Fedoraproject ≫ 389 Directory Server Version1.3.2.11
Fedoraproject ≫ 389 Directory Server Version1.3.2.13
Fedoraproject ≫ 389 Directory Server Version1.3.2.16
Fedoraproject ≫ 389 Directory Server Version1.3.2.19
Fedoraproject ≫ 389 Directory Server Version1.3.2.22
Fedoraproject ≫ 389 Directory Server Version1.3.2.23
Fedoraproject ≫ 389 Directory Server Version1.3.2.24
Fedoraproject ≫ 389 Directory Server Version1.3.2.26
Fedoraproject ≫ 389 Directory Server Version1.3.3.0
Fedoraproject ≫ 389 Directory Server Version1.3.3.2
Fedoraproject ≫ 389 Directory Server Version1.3.3.3
Fedoraproject ≫ 389 Directory Server Version1.3.3.5
Fedoraproject ≫ 389 Directory Server Version1.3.3.8
Fedoraproject ≫ Fedora Version22
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.498
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.