Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2010-3282

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager passw

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hp

Description

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat 389 Directory Server

  • before 1.2.7.1affected

HP HP-UX Directory Server

  • before B.08.10.03affected

References