Lucene search
PRIOn knowledge basePRION:CVE-2020-35518HistoryMar 26, 2021 - 5:15 p.m.
Authentication flaw
2021-03-2617:15:00
PRIOn knowledge base
www.prio-n.com
11
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
Related
fedora
fedora
[SECURITY] Fedora 32 Update: dogtag-pki-10.10.5-1.fc32
2021-03-04 19:56:27
[SECURITY] Fedora 33 Update: dogtag-pki-10.10.5-1.fc33
2021-03-03 23:15:57
[SECURITY] Fedora 34 Update: dogtag-pki-10.10.5-1.fc34
2021-03-03 21:06:32
nessus
nessus
CentOS 8 : 389-ds:1.4 (CESA-2021:1086)
2021-04-09 00:00:00
Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:2323)
2021-06-11 00:00:00
RHEL 7 : 389-ds-base (RHSA-2021:2323)
2021-06-09 00:00:00
suse
suse
Security update for 389-ds (moderate)
2021-03-16 00:00:00
openvas
openvas
openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:0418-1)
2021-04-16 00:00:00
Fedora: Security Advisory for pki-core (FEDORA-2021-263244c071)
2021-03-04 00:00:00
Fedora: Security Advisory for freeipa (FEDORA-2021-7458e2d835)
2021-03-04 00:00:00
redhat
redhat
(RHSA-2021:1243) Moderate: redhat-ds:11 security and bug fix update
2021-04-19 09:44:26
(RHSA-2021:0599) Moderate: redhat-ds:11 security and bug fix update
2021-02-16 18:20:06
(RHSA-2021:1258) Moderate: 389-ds:1.4 security and bug fix update
2021-04-19 14:46:41
redhatcve
redhatcve
CVE-2020-35518
2021-01-19 18:20:39
centos
centos
389 security update
2021-06-14 18:42:56
oraclelinux
oraclelinux
389-ds:1.4 security and bug fix update
2021-04-09 00:00:00
389-ds-base security and bug fix update
2021-06-09 00:00:00
nvd
nvd
CVE-2020-35518
2021-03-26 17:15:12
debiancve
debiancve
CVE-2020-35518
2021-03-26 17:15:12
veracode
veracode
Information Disclosure
2021-01-23 02:17:33
ubuntucve
ubuntucve
CVE-2020-35518
2021-03-26 00:00:00
osv
osv
CVE-2020-35518
2021-03-26 17:15:12
389-ds-base vulnerabilities
2022-07-18 10:09:50
amazon
amazon
Medium: 389-ds-base
2021-06-16 20:37:00
cvelist
cvelist
CVE-2020-35518
2021-03-26 16:43:08
cve
cve
CVE-2020-35518
2021-03-26 17:15:12
ubuntu
ubuntu
389 Directory Server vulnerabilities
2022-07-18 00:00:00