NVD

Id
44460  
Name
CVE-2012-2746  
Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2013-12-05  
Seq
2012-2746  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
223127 44460 CVE-2012-2746 http://directory.fedoraproject.org/wiki/Release_Notes  View
223128 44460 CVE-2012-2746 oval:org.mitre.oval:def:19241  View
223129 44460 CVE-2012-2746 RHSA-2012:0997  View
223130 44460 CVE-2012-2746 RHSA-2012:1041  View
223131 44460 CVE-2012-2746 54153  View
223132 44460 CVE-2012-2746 389directory-logging-info-disclosure(76595)  View
223133 44460 CVE-2012-2746 https://bugzilla.redhat.com/show_bug.cgi?id=833482  View
223134 44460 CVE-2012-2746 https://fedorahosted.org/389/ticket/365  View
223135 44460 CVE-2012-2746 HPSBUX02881  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27268 JVNDB-2012-002975 389 Directory Server におけるパスワードを読まれる脆弱性 Fedora Project の 389 Directory Server (別名 Red Hat Directory Server) は、監査ログが有効である場合、LDAP ユーザのパスワードが変更されたときに、新しいパスワードを平文でログに保存するため、パスワードを読まれる脆弱性が存在します。 CVE-2012-2746 55984 CVE-2012-2746 44460 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002975.html 2012-06-20 2012-07-09 View