Medium severity6.5NVD Advisory· Published Nov 8, 2019· Updated Jun 17, 2026
CVE-2019-14824
CVE-2019-14824
Description
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: n/a
Patches
Vulnerability mechanics
References
5- access.redhat.com/errata/RHSA-2019:3981nvdVendor Advisory
- access.redhat.com/errata/RHSA-2020:0464nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- lists.debian.org/debian-lts-announce/2019/11/msg00036.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2023/04/msg00026.htmlnvd
News mentions
0No linked articles in our index yet.