Lucene search
GoogleOSV:CVE-2020-35518HistoryMar 26, 2021 - 5:15 p.m.
CVE-2020-35518
2021-03-2617:15:12
Google
osv.dev
6
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
| CPE | Name | Operator | Version |
|---|---|---|---|
| 389-ds-base | eq | 389-ds-base-2.0.1 | |
| 389-ds-base | eq | 389-ds-base-2.0.0.0 | |
| 389-ds-base | eq | 389-ds-base-2.0.0 |
Related
fedora
fedora
[SECURITY] Fedora 32 Update: dogtag-pki-10.10.5-1.fc32
2021-03-04 19:56:27
[SECURITY] Fedora 34 Update: 389-ds-base-2.0.3-3.fc34
2021-03-03 21:06:31
[SECURITY] Fedora 33 Update: freeipa-4.9.2-4.fc33
2021-03-03 23:15:57
nessus
nessus
CentOS 8 : 389-ds:1.4 (CESA-2021:1086)
2021-04-09 00:00:00
Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:2323)
2021-06-11 00:00:00
RHEL 7 : 389-ds-base (RHSA-2021:2323)
2021-06-09 00:00:00
suse
suse
Security update for 389-ds (moderate)
2021-03-16 00:00:00
openvas
openvas
openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:0418-1)
2021-04-16 00:00:00
Fedora: Security Advisory for 389-ds-base (FEDORA-2021-dc1a4934a5)
2021-03-05 00:00:00
Fedora: Security Advisory for pki-core (FEDORA-2021-7458e2d835)
2021-03-04 00:00:00
redhat
redhat
(RHSA-2021:1243) Moderate: redhat-ds:11 security and bug fix update
2021-04-19 09:44:26
(RHSA-2021:2323) Moderate: 389-ds-base security and bug fix update
2021-06-08 18:01:11
(RHSA-2021:1086) Moderate: 389-ds:1.4 security and bug fix update
2021-04-06 13:31:45
prion
prion
Authentication flaw
2021-03-26 17:15:00
cve
cve
CVE-2020-35518
2021-03-26 17:15:12
amazon
amazon
Medium: 389-ds-base
2021-06-16 20:37:00
cvelist
cvelist
CVE-2020-35518
2021-03-26 16:43:08
oraclelinux
oraclelinux
389-ds-base security and bug fix update
2021-06-09 00:00:00
389-ds:1.4 security and bug fix update
2021-04-09 00:00:00
redhatcve
redhatcve
CVE-2020-35518
2021-01-19 18:20:39
centos
centos
389 security update
2021-06-14 18:42:56
nvd
nvd
CVE-2020-35518
2021-03-26 17:15:12
veracode
veracode
Information Disclosure
2021-01-23 02:17:33
debiancve
debiancve
CVE-2020-35518
2021-03-26 17:15:12
ubuntucve
ubuntucve
CVE-2020-35518
2021-03-26 00:00:00
osv
osv
389-ds-base vulnerabilities
2022-07-18 10:09:50
ubuntu
ubuntu
389 Directory Server vulnerabilities
2022-07-18 00:00:00