PT-2018-3497 · Red Hat+3 · 389-Ds-Base+4

Martin Poole

+1

·

Publicado

2018-01-24

·

Atualizado

2023-02-12

·

CVE-2017-15135

CVSS v3.1

8.1

Alta

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: 389-ds-base versions 1.3.6.1 through 1.4.0.3
Description: The issue is related to incorrect handling of internal hash comparison operations during the authentication process. This could potentially allow a remote, unauthenticated attacker to bypass the authentication process under rare and specific circumstances. The vulnerability may enable an attacker to access confidential data.
Recommendations: For versions 1.3.6.1 through 1.4.0.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

ALT-PU-2019-1207
BDU:2020-02902
CESA-2018_0414
CESA-2018_0515
CVE-2017-15135
MGASA-2018-0193
OPENSUSE-SU-2019:1397-1
OPENSUSE-SU-2019_1397-1
RHSA-2018:0414
RHSA-2018:0515
RHSA-2018_0414
RHSA-2018_0515
SUSE-SU-2019:1207-1
SUSE-SU-2019:1207-2

Produtos afetados

389-Ds-Base
Alt Linux
Centos
Red Hat
Suse