Описание
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| 389-ds-base | fixed | 2.0.15-1 | package |
Примечания
https://bugzilla.redhat.com/show_bug.cgi?id=2064769
https://github.com/389ds/389-ds-base/issues/5221
https://github.com/389ds/389-ds-base/commit/b7fd028e5e67686afea617beb1791e9f3e7a4cb9 (389-ds-base-2.1.1)
https://github.com/389ds/389-ds-base/commit/e6431d959bf3cd07160c5b1822802d5f532d956a (389-ds-base-2.0.15)
EPSS
Связанные уязвимости
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
Уязвимость аутентификации сервера службы каталогов 389 Directory Server, связанная с неверным сроком действия сеанса, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS