Description
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Directory Server 8 for RHEL 5 | |||
| redhat-ds-base-0:8.2.11-15.el5dsrv | cpe:/a:redhat:directory_server:8::el5 | RHSA-2014:1032 | 2014-08-07T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| 389-ds-base-0:1.2.11.15-34.el6_5 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:1031 | 2014-08-07T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| 389-ds-base-0:1.3.1.6-26.el7_0 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2014:1031 | 2014-08-07T00:00:00Z |
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2014-3544 | Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T10:50:17.515Z
Reserved: 2014-05-14T00:00:00.000Z
Link: CVE-2014-3562
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-08-21T14:55:04.993
Modified: 2026-05-06T22:30:45.220
Link: CVE-2014-3562
Redhat
OpenCVE Enrichment
No data.