Information Disclosure Vulnerability in 389 Directory Server by Red Hat

CVE-2014-8105

Summary

The 389 Directory Server is susceptible to an information disclosure vulnerability due to improper access restrictions on the 'cn=changelog' LDAP sub-tree. This flaw allows remote attackers to access sensitive information stored in the changelog using unspecified vectors, potentially compromising the integrity and confidentiality of the data within the server. Administrators of the affected versions should prioritize applying necessary patches to mitigate the risks associated with this vulnerability.

References