CVE-2017-15135: vulnerability in Red Hat, Inc. 389-ds-base
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.8%
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.
Affected products
Red Hat, Inc. · 389-ds-baseRelated CVEs — Red Hat, Inc. 389-ds-base
In the same product, most dangerous first.