2 matches found
389-ds-base: information disclosure during the binding of a DN
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...
5.3CVSS5.8AI score0.01538EPSS
SaveExploits0References4
UBUNTU-CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...
5.3CVSS6.6AI score0.01538EPSS
SaveExploits0References5
20