Read the docs

openldap

Records60All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

openldap records in CISA KEV

No openldap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openldap 59 records HIGH Openldap-servers 1 record LOW

Records

1 record in Openldap-servers · all components

TI-2016-04305 CVE-2016-4984 · GHSA-8mqm-pq95-4fc3

/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions…

Priority LOW 21

/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS certificate by leveraging a race condition between the creation…

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0015 Published 2017-07-14 Will not fix CWE-362
Open these records in search →