CVE-2019-14824

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

• CWE-732
• CWE-732

• https://access.redhat.com/errata/RHSA-2019:3981Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0464Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14824Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/11/msg00036.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
• https://access.redhat.com/errata/RHSA-2019:3981Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0464Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14824Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/11/msg00036.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html

Published

Nov 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14819A flaw was found during the upgrade of an existing OpenShift…8.8
• CVE-2019-1482Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14820It was found that keycloak before version 8.0.0 exposes inte…4.3
• CVE-2019-14821An out-of-bounds access issue was found in the Linux kernel,…8.8
• CVE-2019-14822A flaw was discovered in ibus in versions before 1.5.22 that…7.1
• CVE-2019-14823A flaw was found in the "Leaf and Chain" OCSP policy impleme…7.4
• CVE-2019-14825A cleartext password storage issue was discovered in Katello…2.7
• CVE-2019-14826A flaw was found in FreeIPA versions 4.5.0 and later. Sessio…4.4
• CVE-2019-14827A vulnerability was found in Moodle where javaScript injecti…6.1
• CVE-2019-14828A vulnerability was found in Moodle affecting 3.7 to 3.7.1, …4.3
• CVE-2019-14829A vulnerability was found in Moodle affection 3.7 to 3.7.1, …4.3
• CVE-2019-1483An elevation of privilege vulnerability exists when the Wind…7.8