VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 27, 2023· Updated Mar 11, 2025

CVE-2023-1055

CVE-2023-1055

Description

A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • RHDS/RHDSdescription
  • Red Hat/RHDSllm-create
    Range: 11 and 12

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.