Red Hat Security AdvisoryRHSA-2022:5823
389-ds:1.4 security update
Released 2022-08-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) 389-ds-base-1.4.3.28-7.module+el8.6.0+15293+4900ec12.aarch64::389-ds:1.4, 389-ds-base-1.4.3.28-7.module+el8.6.0+15293+4900ec12.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.28-7.module+el8.6.0+15293+4900ec12.s390x::389-ds:1.4 +19
Fixes 2 records
Priority MEDIUM 42
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05914 · Published 2022-03-16 · Partial fix
Priority LOW 32
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01531 · Published 2022-03-23 · Partial fix CWE-287
