389-ds-base: Read permission check bypass via the deref plugin
Published Nov 8, 2019
6.5
MEDIUMCVSS 3.1
EPSS 1.31%
Description
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.
Affected products
- Vendor n/a Product 389-DS-Base Defaultn/a
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||
|---|---|---|---|---|---|---|
| n/a | 389-DS-Base | n/a |
|
Configuration 1
- n/a
Configuration 2
- 7.0
Configuration 3
- 8.0
No data.
Red Hat Enterprise Linux 7
389-ds-base-0:1.3.9.1-12.el7_7
Fixed · RHSA-2019:3981
Red Hat Enterprise Linux 8
389-ds:1.4-8010020190903200205.eb48df33
Fixed · RHSA-2019:3401
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions
389-ds:1.4-8000020191107193846.187e9a3f
Fixed · RHSA-2020:0464
Red Hat Enterprise Linux 6
389-ds-base
Out of support scope
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | 389-ds-base-0:1.3.9.1-12.el7_7 | Fixed | RHSA-2019:3981 |
| Red Hat Enterprise Linux 8 | 389-ds:1.4-8010020190903200205.eb48df33 | Fixed | RHSA-2019:3401 |
| Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions | 389-ds:1.4-8000020191107193846.187e9a3f | Fixed | RHSA-2020:0464 |
| Red Hat Enterprise Linux 6 | 389-ds-base | Out of support scope | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This vulnerability is rated Important when use in a IdM/IPA environment, where an ACI installed by default allows an authenticated attacker to use this flaw to retrieve the userPassword attribute of any user.
References (10)
- https://access.redhat.com/errata/RHSA-2019:3981 vendor-advisoryx_refsource_REDHATVendor Advisory
- https://access.redhat.com/errata/RHSA-2020:0464 vendor-advisoryx_refsource_REDHATVendor Advisory
- https://access.redhat.com/security/cve/CVE-2019-14824 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1747448 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14824 x_refsource_CONFIRMIssue TrackingVendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/11/msg00036.html mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-14824
- https://pagure.io/389-ds-base/issue/50716
- https://www.cve.org/CVERecord?id=CVE-2019-14824
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2019:3981 | vendor-advisoryx_refsource_REDHATVendor Advisory | |
| https://access.redhat.com/errata/RHSA-2020:0464 | vendor-advisoryx_refsource_REDHATVendor Advisory | |
| https://access.redhat.com/security/cve/CVE-2019-14824 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1747448 | Issue Tracking | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14824 | x_refsource_CONFIRMIssue TrackingVendor Advisory | |
| https://lists.debian.org/debian-lts-announce/2019/11/msg00036.html | mailing-listx_refsource_MLISTMailing ListThird Party Advisory | |
| https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html | ||
| https://nvd.nist.gov/vuln/detail/CVE-2019-14824 | ||
| https://pagure.io/389-ds-base/issue/50716 | ||
| https://www.cve.org/CVERecord?id=CVE-2019-14824 |
Change history (0)
No recorded changes yet.