Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Red Hat Directory Server 信任管理问题漏洞
Vulnerability Description
Red Hat Directory Server是美国红帽（Red Hat）公司的一款商业版Linux目录服务器。 Red Hat Directory Server 11和12存在安全漏洞，该漏洞源于在浏览条目时，LDAP 会尝试解码 userPassword 属性而不是 userCertificate 属性，这可能会导致敏感信息泄露，攻击者利用该漏洞可以列出进程并显示散列密码。
CVSS Information
N/A
Vulnerability Type
N/A