REDHAT-BUG-1123477: High severity red hat directory server vulnerability
IssueDescription:
It was found that when replication was enabled for each attribute in Red Hat Directory Server / 389 Directory Server, which is the default configuration, the server returned replicated metadata when the directory was searched while debugging was enabled. A remote attacker could use this flaw to disclose potentially sensitive information.
Acknowledgements:
This issue was discovered by Ludwig Krispenz of Red Hat.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1123477?
The severity of REDHAT-BUG-1123477 is critical due to the potential for remote attackers to access sensitive replicated metadata.
How do I fix REDHAT-BUG-1123477?
To fix REDHAT-BUG-1123477, disable debugging in the Red Hat Directory Server or apply security patches provided by Red Hat.
What are the risks associated with REDHAT-BUG-1123477?
The risks associated with REDHAT-BUG-1123477 include unauthorized access to replicated metadata which can lead to data exposure.
Who is affected by REDHAT-BUG-1123477?
Users of Red Hat Directory Server and 389 Directory Server with replication enabled are affected by REDHAT-BUG-1123477.
When was REDHAT-BUG-1123477 reported?
REDHAT-BUG-1123477 was reported recently, highlighting a significant security risk in the replication configuration.