VDB
DEBIAN-CVE-2014-8112
DEBIAN-CVE-2014-8112
PUBLISHED
CVSS 7 HIGH
389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows remote authenticated users to obtain sensitive information by reading the Changelog.
Risk Scores
CVSS 4.0
7
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | 389-ds-base | 0, 0, 0 |
| Debian:13 | 389-ds-base | 0, 0, 0 |
| Debian:11 | 389-ds-base | 0, 0, 0 |
Timeline
- Mar 10, 2015 CVE Published
- Apr 28, 2026 CVE Updated