Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr4q-qmwm-h86v

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

EPSS

Процентиль: 58%
0.00369
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-209
CWE-640

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 8 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CVSS3: 5.3
redhat
больше 8 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CVSS3: 9.8
nvd
около 8 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CVSS3: 9.8
debian
около 8 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to pass ...

oracle-oval
около 8 лет назад

ELSA-2017-2569: 389-ds-base security and bug fix update (MODERATE)

EPSS

Процентиль: 58%
0.00369
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-209
CWE-640