CVE-2017-7551

Опубликовано: 16 авг. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

Ссылки

https://access.redhat.com/errata/RHSA-2017:2569
https://pagure.io/389-ds-base/issue/49336
Exploit
Patch
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2569
https://pagure.io/389-ds-base/issue/49336
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fedoraproject:389_directory_server:1.3.5.19:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:389_directory_server:1.3.6.7:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00369

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-209

CWE-640

Связанные уязвимости

CVE-2017-7551

CVSS3: 9.8

ubuntu

около 8 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CVE-2017-7551

CVSS3: 5.3

redhat

больше 8 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CVE-2017-7551

CVSS3: 9.8

debian

около 8 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to pass ...

GHSA-rr4q-qmwm-h86v

CVSS3: 9.8

github

больше 3 лет назад

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

ELSA-2017-2569

oracle-oval

около 8 лет назад

ELSA-2017-2569: 389-ds-base security and bug fix update (MODERATE)

EPSS

Процентиль: 58%

0.00369

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-209

CWE-640