Lucene search
Veracode Vulnerability DatabaseVERACODE:29133HistoryJan 23, 2021 - 2:17 a.m.
Information Disclosure
2021-01-2302:17:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
45.0%
389-ds-base is vulnerable to information disclosure. The vulnerability exist because the reply from 389-ds-base is different depending on whether the DN exist or not, thus an attacker is able to check the existence of an entry in the LDAP database.
Related
fedora
fedora
[SECURITY] Fedora 32 Update: dogtag-pki-10.10.5-1.fc32
2021-03-04 19:56:27
[SECURITY] Fedora 33 Update: dogtag-pki-10.10.5-1.fc33
2021-03-03 23:15:57
[SECURITY] Fedora 34 Update: 389-ds-base-2.0.3-3.fc34
2021-03-03 21:06:31
nessus
nessus
CentOS 8 : 389-ds:1.4 (CESA-2021:1086)
2021-04-09 00:00:00
Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:2323)
2021-06-11 00:00:00
RHEL 7 : 389-ds-base (RHSA-2021:2323)
2021-06-09 00:00:00
suse
suse
Security update for 389-ds (moderate)
2021-03-16 00:00:00
openvas
openvas
openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:0418-1)
2021-04-16 00:00:00
Fedora: Security Advisory for pki-core (FEDORA-2021-263244c071)
2021-03-04 00:00:00
Fedora: Security Advisory for freeipa (FEDORA-2021-7458e2d835)
2021-03-04 00:00:00
redhat
redhat
(RHSA-2021:1243) Moderate: redhat-ds:11 security and bug fix update
2021-04-19 09:44:26
(RHSA-2021:2323) Moderate: 389-ds-base security and bug fix update
2021-06-08 18:01:11
(RHSA-2021:1086) Moderate: 389-ds:1.4 security and bug fix update
2021-04-06 13:31:45
prion
prion
Authentication flaw
2021-03-26 17:15:00
redhatcve
redhatcve
CVE-2020-35518
2021-01-19 18:20:39
centos
centos
389 security update
2021-06-14 18:42:56
oraclelinux
oraclelinux
389-ds:1.4 security and bug fix update
2021-04-09 00:00:00
389-ds-base security and bug fix update
2021-06-09 00:00:00
cve
cve
CVE-2020-35518
2021-03-26 17:15:12
amazon
amazon
Medium: 389-ds-base
2021-06-16 20:37:00
cvelist
cvelist
CVE-2020-35518
2021-03-26 16:43:08
osv
osv
CVE-2020-35518
2021-03-26 17:15:12
389-ds-base vulnerabilities
2022-07-18 10:09:50
nvd
nvd
CVE-2020-35518
2021-03-26 17:15:12
debiancve
debiancve
CVE-2020-35518
2021-03-26 17:15:12
ubuntucve
ubuntucve
CVE-2020-35518
2021-03-26 00:00:00
ubuntu
ubuntu
389 Directory Server vulnerabilities
2022-07-18 00:00:00