CVE-2019-14824

lowpriority · track · 26EPSS 0.013 · 70 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.31% (70th) EPSS

CVSS 3.5 · low

Is it mine?

54 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixed389-ds-base-0:1.3.9.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-debuginfo-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-devel-0:1.3.9.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-devel-0:1.3.9.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-devel-0:1.3.9.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-devel-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-devel-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-devel-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-devel-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-libs-0:1.3.9.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-libs-0:1.3.9.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-libs-0:1.3.9.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-libs-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-libs-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-libs-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-libs-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-snmp-0:1.3.9.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-snmp-0:1.3.9.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-snmp-0:1.3.9.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-snmp-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-snmp-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-snmp-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-snmp-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the 389 server service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2019:3981
Fixed389-ds-base-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.src (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-debugsource-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-debugsource-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-devel-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-devel-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-legacy-tools-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-legacy-tools-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-legacy-tools-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-legacy-tools-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-libs-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-libs-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-libs-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-libs-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-snmp-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-snmp-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-snmp-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixed389-ds-base-snmp-debuginfo-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464
Fixedpython3-lib389-0:1.4.0.20-10.1.module+el8.0.0+4597+364a3066.noarch (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:0464

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.5–6.5

v2.03.5lowAV:N/AC:M/Au:S/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 6.8 · impact 2.9

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · secalert@redhat.com USexploitability 2.8 · impact 3.6

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US

v3.16.5mediumAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-732USprimaryCWE-732USCWE-732US

affected products (54)

Products and version ranges known to be affected.

[UNKNOWN] 389-ds-base≤ n/aenisa_euvdEU
Fedora Project 389 Directory Server≤ 1.4.2.4fstec_bduRU
АО «ИВК» Альт 8 СПall versionsfstec_bduRU
АО «НППКТ» ОСОН ОСнова Оnyx≤ 2.5fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition≤ 1.7fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition≤ 4.7fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 10fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 11fstec_bduRU
debian debian linux= 8.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
fedoraproject 389 directory serverall versionsnvdUScpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*
redhat enterprise linux= 7.0nvdUScpe:2.3:o:redhat:enterprise_linux:*:*:*:*:*:*:*:*
389-ds-base-0:1.3.9.1-12.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.9.1-12.el7_7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)all versionsfixedredhat_csafUS

showing 20 of 54

advisories (2)

Vendor and ecosystem advisories describing this.

RHSA-2019:3981Red Hat Security Advisory: 389-ds-base security and bug fix update2019-11-26csaf · redhat_csafUS
An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2020:0464Red Hat Security Advisory: 389-ds:1.4 security update2020-02-10csaf · redhat_csafUS
An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

published 2019-11-08modified 2026-06-17

related (1,935)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-22960US	high7.8OT critical	35.5% (98th)	KEV	2022-04-13
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor…
CVE-2021-23874US	high7.8OT critical	1.03% (63rd)	KEV	2021-02-10
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP…
CVE-2019-15752US	high7.8OT critical	48.6% (99th)	KEV	2019-08-28
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\ve…
CVE-2018-13374US	medium4.3OT critical	38.1% (99th)	KEV	2019-01-22
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials co…
CVE-2021-25646US	high8.8	99.1% (100th)	Exploit	2021-01-29
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments,…

+1930 more

references (29)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan