Red Hat Security Advisory

RHSA-2021:1086

389-ds:1.4 security and bug fix update

Released 2021-04-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) 389-ds-base-1.4.3.8-7.module+el8.3.0+10310+6e88d919.aarch64::389-ds:1.4, 389-ds-base-1.4.3.8-7.module+el8.3.0+10310+6e88d919.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.8-7.module+el8.3.0+10310+6e88d919.s390x::389-ds:1.4 +19

TI-2020-18037 CVE-2020-35518 · GHSA-vg4h-9m5m-rchq

LOW 27

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01538 Published 2021-03-26 Partial fix CWE-200