Security Advisory

CVE-2020-35518

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-03-26 16:43:08

Last updated 2024-08-04 17:02:08

Assigner redhat

State PUBLISHED

Description

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

← Browse all CVEs View on cve.org ↗