Debian/389-ds-base: medium 5.5
A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information lea
Action: Upgrade 389-ds-base to 2.3.4+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.4+dfsg1-1 | - |
Fixed versions
| 2.3.4+dfsg1-1 |
Sources
- osv: DEBIAN-CVE-2023-1055#Debian:13/389-ds-base
- https://security-tracker.debian.org/tracker/CVE-2023-1055
published · modified · JSON