CVE-2010-3282

EPSS 0.3%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Jan 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.

Affected products

HP · HP-UX Directory Server Red Hat · 389 Directory Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6914 https://bugzilla.redhat.com/show_bug.cgi?id=625950 https://git.fedorahosted.org/cgit/389/ds.git/commit/?id=d38ae06 https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c02522633&docLocale=en_US