Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:directory_server:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductDirectory Server (3e674fee-72c5-5378-a09c-982c9590dba8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/389ds/389-ds-base purl2cpe 2026-06-01 10:12:53.708346
pkg:gitlab/redhat/389-ds-base purl2cpe 2026-06-01 10:12:53.708347

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3562 vulnerable 2026-06-08 05:05:33.465096 Details available
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.
Published: 2014-08-21T14:00:00.000Z
Updated: 2024-08-06T10:50:17.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4485 vulnerable 2026-06-08 05:04:47.303786 Details available
389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.
Published: 2013-11-23T11:00:00.000Z
Updated: 2024-08-06T16:45:14.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2219 vulnerable 2026-06-08 05:04:23.625322 Details available
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.
Published: 2013-07-31T10:00:00.000Z
Updated: 2024-08-06T15:27:41.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2746 vulnerable 2026-06-08 05:02:06.078779 Details available
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.
Published: 2012-07-03T16:00:00.000Z
Updated: 2024-08-06T19:42:32.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2678 vulnerable 2026-06-08 05:02:05.397859 Details available
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
Published: 2012-07-03T16:00:00.000Z
Updated: 2024-08-06T19:42:31.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3282 vulnerable 2026-06-08 04:55:13.947954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2241 vulnerable 2026-06-08 04:54:12.420998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2222 vulnerable 2026-06-08 04:54:12.279197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3283 vulnerable 2026-06-08 04:50:34.041090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2930 vulnerable 2026-06-08 04:50:32.590029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1677 vulnerable 2026-06-08 04:50:21.482547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.