Vulnerability Details CVE-2012-2678
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.0%
CVSS Severity
CVSS v2 Score 1.2
References
- http://directory.fedoraproject.org/wiki/Release_Notes
- http://osvdb.org/83336
- http://rhn.redhat.com/errata/RHSA-2012-0997.html
- http://rhn.redhat.com/errata/RHSA-2012-1041.html
- http://secunia.com/advisories/49734
- http://www.securityfocus.com/bid/54153
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353
- http://directory.fedoraproject.org/wiki/Release_Notes
- http://osvdb.org/83336
- http://rhn.redhat.com/errata/RHSA-2012-0997.html
- http://rhn.redhat.com/errata/RHSA-2012-1041.html
- http://secunia.com/advisories/49734
- http://www.securityfocus.com/bid/54153
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353
Products affected by CVE-2012-2678
-
cpe:2.3:a:fedoraproject:389_directory_server:-
-
cpe:2.3:a:fedoraproject:389_directory_server:1.1.46
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.1
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.10
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.1
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.11
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.2
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.3
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.4
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.10.7
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.1
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.11.5
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.2
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.3
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.5
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.6
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.6.1
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.7
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.7.1
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.7.5
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.8
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.1
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.2
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.8.3
-
cpe:2.3:a:fedoraproject:389_directory_server:1.2.9.9
-
cpe:2.3:a:redhat:directory_server:-
-
cpe:2.3:a:redhat:directory_server:7.1
-
cpe:2.3:a:redhat:directory_server:8
-
cpe:2.3:a:redhat:directory_server:8.0
-
cpe:2.3:a:redhat:directory_server:8.1
-
cpe:2.3:a:redhat:directory_server:8.2