CVE-2012-4450: Fedoraproject 389 Directory Server

Medium severity, CVSS 6.0. EPSS: 1.9% chance of exploitation in the next 30 days.

389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.

Affected products

• Fedoraproject 389 Directory Server: version 1.2.10 only

Published 2012-10-01. Last modified 2026-06-16.