Astra Linux – vulnerability in 389-ds-base

When binding to a DN during authentication, the response from 389-ds-base differs whether the DN exists or not. This can be exploited by an unauthenticated attacker to verify the existence of an entry in the LDAP database...