CVE-2017-7551CWE-209

CVE-2017-7551: vulnerability in 389-ds-base

Published · Updated

Follow this CVE+ Monitor 389-ds-base+ Monitor 389-ds-base

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.
Affected products
389 Directory Server · 389-ds-base