Vulnerabilities > Redhat > 389 Directory Server > 1.3.1.5

DATE CVE VULNERABILITY TITLE RISK
2022-06-02 CVE-2022-1949 Authorization Bypass Through User-Controlled Key vulnerability in multiple products
An access control bypass vulnerability found in 389-ds-base.
network
low complexity
redhat fedoraproject CWE-639
7.5
2021-03-26 CVE-2020-35518 Information Exposure Through Discrepancy vulnerability in Redhat 389 Directory Server
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not.
network
low complexity
redhat CWE-203
5.3
2018-09-11 CVE-2018-10935 Improper Input Validation vulnerability in Redhat 389 Directory Server
A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort.
network
low complexity
redhat CWE-20
6.5