NVD

Id
44396  
Name
CVE-2012-2678  
Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2013-12-05  
Seq
2012-2678  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222728 44396 CVE-2012-2678 http://directory.fedoraproject.org/wiki/Release_Notes  View
222729 44396 CVE-2012-2678 oval:org.mitre.oval:def:19353  View
222730 44396 CVE-2012-2678 RHSA-2012:0997  View
222731 44396 CVE-2012-2678 RHSA-2012:1041  View
222732 44396 CVE-2012-2678 54153  View
222733 44396 CVE-2012-2678 HPSBUX02881  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27267 JVNDB-2012-002974 389 Directory Server におけるパスワードを読まれる脆弱性 Fedora Project の 389 Directory Server (別名 Red Hat Directory Server) には、LDAP ユーザのパスワードが変更された後、サーバがリセットされる前に、平文のパスワードを読まれる脆弱性が存在します。 CVE-2012-2678 55916 CVE-2012-2678 44396 1.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002974.html 2012-06-20 2012-07-04 View