Поиск уязвимостей
Количество 17
Количество 17
CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.
CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.
CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.
CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote at ...
GHSA-r7mx-568f-jgg3
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.
RLSA-2026:55530
Important: 389-ds:1.4 security update
RLSA-2026:55424
Important: 389-ds-base security update
RLSA-2026:55423
Important: 389-ds-base security update
ELSA-2026-55758
ELSA-2026-55758: 389-ds-base security update (IMPORTANT)
ELSA-2026-55530
ELSA-2026-55530: 389-ds:1.4 security update (IMPORTANT)
ELSA-2026-55424
ELSA-2026-55424: 389-ds-base security update (IMPORTANT)
ELSA-2026-55423
ELSA-2026-55423: 389-ds-base security update (IMPORTANT)
openSUSE-SU-2026:21950-1
Security update for 389-ds
SUSE-SU-2026:4380-1
Security update for 389-ds
SUSE-SU-2026:4932-1
Security update for 389-ds
SUSE-SU-2026:4929-1
Security update for 389-ds
ALT-PU-2026-14987
ALT-PU-2026-14987: package `389-ds-base` update to version 3.1.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-11770 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-11770 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-11770 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| CVE-2026-11770 A flaw was found in 389 Directory Server. An unauthenticated remote at ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| GHSA-r7mx-568f-jgg3 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:55530 Important: 389-ds:1.4 security update | 3 месяца назад | ||
| RLSA-2026:55424 Important: 389-ds-base security update | 3 месяца назад | ||
| RLSA-2026:55423 Important: 389-ds-base security update | 3 месяца назад | ||
| ELSA-2026-55758 ELSA-2026-55758: 389-ds-base security update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-55530 ELSA-2026-55530: 389-ds:1.4 security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-55424 ELSA-2026-55424: 389-ds-base security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-55423 ELSA-2026-55423: 389-ds-base security update (IMPORTANT) | 3 месяца назад | ||
 | openSUSE-SU-2026:21950-1 Security update for 389-ds | около 2 месяцев назад | ||
| SUSE-SU-2026:4380-1 Security update for 389-ds | около 1 месяца назад | ||
| SUSE-SU-2026:4932-1 Security update for 389-ds | 11 дней назад | ||
| SUSE-SU-2026:4929-1 Security update for 389-ds | 11 дней назад | ||
| ALT-PU-2026-14987 ALT-PU-2026-14987: package `389-ds-base` update to version 3.1.5-alt1 | CVSS3: 9.8 | около 2 месяцев назад |
Уязвимостей на страницу