{"id":"CVE-2010-3282","aliases":["EUVD-2010-3281","GHSA-c9g4-pfp3-j9qm"],"status":"published","title":"389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server...","description":"389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00264,"percentile":0.18387,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312"],"published":"2020-01-09T20:52:18Z","modified":"2026-06-16T23:22:30Z","products":[{"vendor":"fedoraproject","product":"389_directory_server"},{"vendor":"hp","product":"hp-ux directory server"},{"vendor":"hp","product":"hp-ux_directory_server"},{"vendor":"red hat","product":"389 directory server"},{"vendor":"redhat","product":"directory_server"},{"vendor":"redhat","product":"redhat_directory_server"}],"references":[{"url":"http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6914","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Not Applicable"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=625950","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://git.fedorahosted.org/cgit/389/ds.git/commit/?id=d38ae06","tags":["x_refsource_CONFIRM","x_transferred","Product"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c02522633\u0026docLocale=en_US","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3282"},{"url":"https://github.com/advisories/GHSA-c9g4-pfp3-j9qm"}],"sources":{"cve":[{"id":"CVE-2010-3282","description":"389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.","status":"published","published":"2020-01-09T20:52:18Z","modified":"2024-08-07T03:03:18.937Z","updated_at":"2026-11-02T14:33:27.739358Z"}],"euvd":[{"id":"EUVD-2010-3281","description":"389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.","status":"published","published":"2020-01-09T20:52:18Z","modified":"2024-08-07T03:03:18Z","updated_at":"2026-11-03T01:39:34.48505Z"}],"ghsa":[{"id":"GHSA-c9g4-pfp3-j9qm","title":"389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server...","description":"389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.","status":"published","published":"2022-04-21T01:57:53Z","modified":"2023-01-27T05:01:54Z","updated_at":"2026-11-02T14:41:59.335185Z"}],"nvd":[{"id":"CVE-2010-3282","description":"389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.","status":"published","published":"2020-01-09T21:15:10.81Z","modified":"2026-06-16T23:22:30.587Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:02:04.957683Z"}]}}