Количество 11
Количество 11
GHSA-g4xg-g9jg-549h
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user.
CVE-2026-76560
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user.
CVE-2026-76560
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user.
CVE-2026-76560
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user.
CVE-2026-76560
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule eva ...
RLSA-2026:64791
Critical: 389-ds:1.4 security, bug fix, and enhancement update
ELSA-2026-64791-0
ELSA-2026-64791-0: 389-ds:1.4 security, bug fix, and enhancement update (CRITICAL)
RLSA-2026:64785
Critical: 389-ds-base security, bug fix, and enhancement update
RLSA-2026:64784
Critical: 389-ds-base security, bug fix, and enhancement update
ELSA-2026-64785-0
ELSA-2026-64785-0: 389-ds-base security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-64784-0
ELSA-2026-64784-0: 389-ds-base security, bug fix, and enhancement update (CRITICAL)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-g4xg-g9jg-549h A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user. | CVSS3: 7.5 | 0% Низкий | 10 дней назад |
 | CVE-2026-76560 A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user. | CVSS3: 7.5 | 0% Низкий | 10 дней назад |
 | CVE-2026-76560 A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user. | CVSS3: 7.5 | 0% Низкий | 10 дней назад |
 | CVE-2026-76560 A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user. | CVSS3: 7.5 | 0% Низкий | 10 дней назад |
| CVE-2026-76560 A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule eva ... | CVSS3: 7.5 | 0% Низкий | 10 дней назад |
 | RLSA-2026:64791 Critical: 389-ds:1.4 security, bug fix, and enhancement update | 9 дней назад | ||
| ELSA-2026-64791-0 ELSA-2026-64791-0: 389-ds:1.4 security, bug fix, and enhancement update (CRITICAL) | 8 дней назад | ||
| RLSA-2026:64785 Critical: 389-ds-base security, bug fix, and enhancement update | 8 дней назад | ||
| RLSA-2026:64784 Critical: 389-ds-base security, bug fix, and enhancement update | 8 дней назад | ||
| ELSA-2026-64785-0 ELSA-2026-64785-0: 389-ds-base security, bug fix, and enhancement update (CRITICAL) | 10 дней назад | ||
| ELSA-2026-64784-0 ELSA-2026-64784-0: 389-ds-base security, bug fix, and enhancement update (CRITICAL) | 10 дней назад |
Уязвимостей на страницу