CVE-2012-2678: fedoraproject 389_directory_server Cryptographic Issues
CVSS: 1.2v2.0LowModified
AliasesUBUNTU-CVE-2012-2678
Published 03-07-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-2678 is a low (CVSS 1.2) Cryptographic Issues vulnerability in fedoraproject 389_directory_server. EPSS estimates a 0.64% chance of exploitation in the next 30 days, higher than 49.5% of scored vulnerabilities.
CVSS score
1.2/10
010
Low · v2.0 (NVD)EPSS score
0.64%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 03-07-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.
CVSS metrics
1 score · 1 source · 1 versionLow 1.2Preferred score · NVD (NIST)
AV:L/AC:H/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.64%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
0.00 pp
From 0.64% on 20-09-2026
20-09-202620-10-2026
EPSS score0.64%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Fedoraproject1 product
- 389_directory_server≤ 1.2.11.5 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.5 | 1.2.5:rc1 | 1.2.5:rc2 | 1.2.5:rc3 | 1.2.5:rc4 | 1.2.6 | 1.2.6:a2 | 1.2.6:a3 | 1.2.6:a4 | 1.2.6:rc1 | 1.2.6:rc2 | 1.2.6:rc3 | 1.2.6:rc6 | 1.2.6:rc7 | 1.2.6.1 | 1.2.7:alpha3 | 1.2.7.5 | 1.2.8:alpha1 | 1.2.8:alpha2 | 1.2.8:alpha3 | 1.2.8:rc1 | 1.2.8:rc2 | 1.2.8.1 | 1.2.8.2 | 1.2.8.3 | 1.2.9.9 | 1.2.10:alpha8 | 1.2.10:rc1 | 1.2.10.1 | 1.2.10.2 | 1.2.10.3 | 1.2.10.4 | 1.2.10.7 | 1.2.11.1
Redhat1 product
- directory_server≤ 8.2 | 7.1 | 8.0 | 8.1
Ubuntu1 product
- 389-ds-base< 1.3.2.16-0ubuntu1
3 vendors · 3 products
References
11 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19353VDB EntrySignatureX Refsource OVAL
- h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03772083Vendor AdvisoryX Refsource HP
- directory.fedoraproject.org/wiki/Release_NotesX Refsource CONFIRM