DEBIAN-CVE-2019-14824

DEBIAN-CVE-2019-14824 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Debian:13	389-ds-base	0, 0, 0
Debian:11	389-ds-base	0, 0, 0
Debian:12	389-ds-base	0, 0, 0

Timeline

Nov 8, 2019 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2019-14824 advisory

Open in Interactive Console →