CVE-2019-10224CWE-522

A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3

Medium · published November 25, 2019

CVSS v3.0
4.3
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An attacker, able to see the screen or record the terminal standard error output, could use this flaw to gain sensitive information.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2019-11-25T00:00Z
EPSS history
Timeline
  • 25 NOV 00:00Z
    A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3
    cvelistv5