Information Disclosure Vulnerability in 389-ds-base from Red Hat

CVE-2019-10224

What is CVE-2019-10224?

A security flaw exists in 389-ds-base versions prior to 1.4.1.3, which can cause sensitive information, including the Directory Manager password, to be exposed via commands run in verbose mode. If an attacker is capable of viewing a terminal session or capturing standard error output, they could potentially retrieve this sensitive data, leading to unauthorized access or compromise.

References