PT-2020-7073
CVE-2010-3282
·
تاريخ النشر
2020-01-09
·
تاريخ التحديث
2020-01-29
الوصف من
CVSS 2.0
1.9
منخفضةالمقاييسAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
389 Directory Server versions prior to 1.2.7.1
HP-UX Directory Server versions prior to B.08.10.03
Description
The issue allows local users to obtain sensitive information by reading the log when audit logging is enabled. This occurs because the Directory Manager password (
nsslapd-rootpw) is logged in cleartext when changing cn=config:nsslapd-rootpw.Recommendations
For 389 Directory Server versions prior to 1.2.7.1, update to version 1.2.7.1 or later to resolve the issue.
For HP-UX Directory Server versions prior to B.08.10.03, update to version B.08.10.03 or later to resolve the issue.
As a temporary workaround, consider disabling audit logging until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾