https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 10:21:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-12486 bdu:2025-12486 https://cve.radiocsirt.org/vuln/bdu:2025-12486 https://cve.radiocsirt.org/vuln/euvd-2026-221842 EUVD-2026-221842 https://cve.radiocsirt.org/vuln/euvd-2026-221842 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1055 <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p> <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1055 https://cve.radiocsirt.org/vuln/ghsa-w8wv-xqxw-7vgx <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p> <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p> https://cve.radiocsirt.org/vuln/ghsa-w8wv-xqxw-7vgx https://cve.radiocsirt.org/vuln/gsd-2023-1055 gsd-2023-1055 https://cve.radiocsirt.org/vuln/gsd-2023-1055 https://cve.radiocsirt.org/vuln/rhsa-2023:3489 <p>RHDS: LDAP browser tries to decode userPassword instead of userCertificate attribute</p> <p>RHDS: LDAP browser tries to decode userPassword instead of userCertificate attribute</p> https://cve.radiocsirt.org/vuln/rhsa-2023:3489 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1055 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1055 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1382 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1382