CVE-2013-2219: Fedoraproject 389 Directory Server

Medium severity, CVSS 4.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute.

Affected products

• Fedoraproject 389 Directory Server: affected versions not specified
• Red Hat Directory Server: up to and including 8.2; version 7.1 only; version 8.0 only; version 8.1 only

Published 2013-07-31. Last modified 2026-06-16.