参照： Official debian advisory, NVD, CVE.org · CVE 詳細
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2012-2746 unimportant priority: Debian including 1 source packages (389-ds-base), 4 status rows across 4 suites (bookworm, bullseye, sid, trixie): resolved 4.
389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.