Lucene search
HistoryAug 21, 2014 - 2:55 p.m.
CVE-2014-3562
cve-2014-3562
red hat
directory server
389 directory server
debugging
remote attackers
sensitive data
metadata
directory
search
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
Affected configurations
Node
fedoraproject389_directory_serverMatch1.2.1
ORfedoraproject389_directory_serverMatch1.2.2
ORfedoraproject389_directory_serverMatch1.2.3
ORfedoraproject389_directory_serverMatch1.2.5
ORfedoraproject389_directory_serverMatch1.2.5rc1
ORfedoraproject389_directory_serverMatch1.2.5rc2
ORfedoraproject389_directory_serverMatch1.2.5rc3
ORfedoraproject389_directory_serverMatch1.2.5rc4
ORfedoraproject389_directory_serverMatch1.2.6
ORfedoraproject389_directory_serverMatch1.2.6a2
ORfedoraproject389_directory_serverMatch1.2.6a3
ORfedoraproject389_directory_serverMatch1.2.6a4
ORfedoraproject389_directory_serverMatch1.2.6rc1
ORfedoraproject389_directory_serverMatch1.2.6rc2
ORfedoraproject389_directory_serverMatch1.2.6rc3
ORfedoraproject389_directory_serverMatch1.2.6rc6
ORfedoraproject389_directory_serverMatch1.2.6rc7
ORfedoraproject389_directory_serverMatch1.2.6.1
ORfedoraproject389_directory_serverMatch1.2.7alpha3
ORfedoraproject389_directory_serverMatch1.2.7.5
ORfedoraproject389_directory_serverMatch1.2.8alpha1
ORfedoraproject389_directory_serverMatch1.2.8alpha2
ORfedoraproject389_directory_serverMatch1.2.8alpha3
ORfedoraproject389_directory_serverMatch1.2.8rc1
ORfedoraproject389_directory_serverMatch1.2.8rc2
ORfedoraproject389_directory_serverMatch1.2.8.1
ORfedoraproject389_directory_serverMatch1.2.8.2
ORfedoraproject389_directory_serverMatch1.2.8.3
ORfedoraproject389_directory_serverMatch1.2.9.9
ORfedoraproject389_directory_serverMatch1.2.10
ORfedoraproject389_directory_serverMatch1.2.10alpha8
ORfedoraproject389_directory_serverMatch1.2.10rc1
ORfedoraproject389_directory_serverMatch1.2.10.2
ORfedoraproject389_directory_serverMatch1.2.10.3
ORfedoraproject389_directory_serverMatch1.2.10.4
ORfedoraproject389_directory_serverMatch1.2.10.11
ORfedoraproject389_directory_serverMatch1.2.11.1
ORfedoraproject389_directory_serverMatch1.2.11.5
ORfedoraproject389_directory_serverMatch1.2.11.6
ORfedoraproject389_directory_serverMatch1.2.11.8
ORfedoraproject389_directory_serverMatch1.2.11.9
ORfedoraproject389_directory_serverMatch1.2.11.10
ORfedoraproject389_directory_serverMatch1.2.11.11
ORfedoraproject389_directory_serverMatch1.2.11.12
ORfedoraproject389_directory_serverMatch1.2.11.13
ORfedoraproject389_directory_serverMatch1.2.11.14
ORfedoraproject389_directory_serverMatch1.2.11.15
ORfedoraproject389_directory_serverMatch1.2.11.17
ORfedoraproject389_directory_serverMatch1.2.11.19
ORfedoraproject389_directory_serverMatch1.2.11.20
ORfedoraproject389_directory_serverMatch1.2.11.21
ORfedoraproject389_directory_serverMatch1.2.11.22
ORfedoraproject389_directory_serverMatch1.2.11.23
ORfedoraproject389_directory_serverMatch1.2.11.25
ORfedoraproject389_directory_serverMatch1.2.11.26
ORfedoraproject389_directory_serverMatch1.3.0.2
ORfedoraproject389_directory_serverMatch1.3.0.3
ORfedoraproject389_directory_serverMatch1.3.0.4
ORfedoraproject389_directory_serverMatch1.3.0.5
ORfedoraproject389_directory_serverMatch1.3.0.6
ORfedoraproject389_directory_serverMatch1.3.0.7
ORfedoraproject389_directory_serverMatch1.3.0.8
ORredhatdirectory_serverMatch8.0
ORredhatenterprise_linuxMatch6.0
ORredhatenterprise_linuxMatch7.0
Related
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-396)
2015-09-08 00:00:00
Fedora Update for 389-ds-base FEDORA-2014-9391
2014-08-16 00:00:00
CentOS Update for 389-ds-base CESA-2014:1031 centos7
2014-09-10 00:00:00
amazon
amazon
Important: 389-ds-base
2014-08-21 11:20:00
oraclelinux
oraclelinux
389-ds-base security update
2014-08-07 00:00:00
389-ds-base security, bug fix, and enhancement update
2015-03-09 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: 389-ds-base-1.3.2.22-1.fc20
2014-08-16 00:26:22
centos
centos
389 security update
2014-08-07 18:28:00
nvd
nvd
CVE-2014-3562
2014-08-21 14:55:04
nessus
nessus
Amazon Linux AMI : 389-ds-base (ALAS-2014-396)
2014-10-12 00:00:00
RHEL 6 / 7 : 389-ds-base (RHSA-2014:1031)
2014-08-08 00:00:00
Fedora 20 : 389-ds-base-1.3.2.22-1.fc20 (2014-9391)
2014-08-16 00:00:00
cvelist
cvelist
CVE-2014-3562
2014-08-21 14:00:00
redhat
redhat
(RHSA-2014:1031) Important: 389-ds-base security update
2014-08-07 00:00:00
(RHSA-2014:1032) Important: redhat-ds-base security update
2014-08-07 00:00:00
debiancve
debiancve
CVE-2014-3562
2014-08-21 14:55:04
mageia
mageia
Updated 389-ds-base packages fix security vulnerability
2014-08-18 13:14:56
ubuntucve
ubuntucve
CVE-2014-3562
2014-08-21 00:00:00
prion
prion
Directory traversal
2014-08-21 14:55:00
veracode
veracode
Information Disclosure
2019-01-15 08:58:40
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%
Related for CVE-2014-3562