NetSight
IP …
medium5.0

CVE-2014-8105

389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote atta…

Impact

389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain sensitive information from the changelog via unspecified vectors.

Affected products

VendorProductAffected versions
Fedoraproject389 Directory Server
through 1.3.2.26
Versions 1.3.3.0, 1.3.3.2, 1.3.3.3, 1.3.3.5, 1.3.3.8
FedoraprojectFedora
Version 22

Weakness classification

CWE-200

References