Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://rhn.redhat.com/errata/RHSA-2014-1031.html | vendor advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1123477 | |
http://rhn.redhat.com/errata/RHSA-2014-1032.html | vendor advisory |