Red Hat Security AdvisoryRHSA-2022:5620
389-ds:1.4 security update
Released 2022-07-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.4) 389-ds-base-1.4.3.16-21.module+el8.4.0+15657+e1585ac1.aarch64::389-ds:1.4, 389-ds-base-1.4.3.16-21.module+el8.4.0+15657+e1585ac1.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.16-21.module+el8.4.0+15657+e1585ac1.s390x::389-ds:1.4 +19
Fixes 2 records
Priority MEDIUM 42
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05914 · Published 2022-03-16 · Partial fix
Priority LOW 32
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01531 · Published 2022-03-23 · Partial fix CWE-287
