CVE-2017-15135
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 3.8%
probabilidad de explotación
3.8%top 11% de las CVE
explotación observada
noninguna fuente lo reporta
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.
Productos afectados
Red Hat, Inc. · 389-ds-base