| Package | Affected versions | Patched versions |
|---|---|---|
| 389 directory server | = 1.2.1= 1.2.10= 1.2.10.1= 1.2.10.2= 1.2.10.3= 1.2.10.4= 1.2.10.7= 1.2.11.1= 1.2.2= 1.2.3= 1.2.5= 1.2.6= 1.2.6.1= 1.2.7= 1.2.7.5= 1.2.8= 1.2.8.1= 1.2.8.2= 1.2.8.3= 1.2.9.9≤ 1.2.11.5 | |
| directory server | = 7.1= 8.0= 8.1≤ 8.2 |
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free