NVD

Id
35331  
Name
CVE-2014-8112  
Description
389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-03-10  
Modified Date
2016-06-30  
Seq
2014-8112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180965 35331 CVE-2014-8112 http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-2-27.html  View
180966 35331 CVE-2014-8112 http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-9.html  View
180967 35331 CVE-2014-8112 FEDORA-2015-3368  View
180968 35331 CVE-2014-8112 RHSA-2015:0416  View
180969 35331 CVE-2014-8112 https://bugzilla.redhat.com/show_bug.cgi?id=1172729  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19099 JVNDB-2014-007974 389 Directory Server における重要な情報を取得される脆弱性 389 Directory Server は、nsslapd-unhashed-pw-switch オプションがオフに設定されている場合にも、"ハッシュ化されていない (unhashed)" パスワードを保存するため、重要な情報を取得される脆弱性が存在します。 CVE-2014-8112 75405 CVE-2014-8112 35331 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007974.html 2014-10-10 2015-03-13 View