CVE-2013-2219
Server: ACLs inoperative in some search scenarios
Loading…
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · July 29, 2013
Updated · November 21, 2025
Description
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 4.3AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE not specified