CVE-2019-14824 Vulnerability Details

  /     /     /  

CVE-2019-14824 Metadata Quick Info

CVE Published: 08/11/2019 | CVE Updated: 05/08/2024 | CVE Year: 2019
Source: redhat | Vendor: [UNKNOWN] | Product: 389-ds-base
Status : PUBLISHED

---

CVE-2019-14824 Description

A flaw was found in the \'deref\' plugin of 389-ds-base where it could use the \'search\' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-732
CWE Name: CWE-732
Source: [UNKNOWN]

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).