389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2015-03-10T14:00:00

Updated: 2024-08-06T13:10:50.811Z

Reserved: 2014-10-10T00:00:00

Link: CVE-2014-8112

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-03-10T14:59:01.600

Modified: 2024-11-21T02:18:34.970

Link: CVE-2014-8112

cve-icon Redhat

Severity : Low

Publid Date: 2015-03-05T00:00:00Z

Links: CVE-2014-8112 - Bugzilla