673 matches found
gdid-reversal
Windows GDID の完全な解析 Global Device Identifier の完全リバースエンジニアリング -8a2be2 -0078d6 2026年7月のScattered Spider告訴状に記載された、Microsoftの永続的なWindowsフィンガープリント「Global Device Identifier」が、実際にどのように生成、保存、送信されるか。 TL;DR（要約） !NOTE...
FortiOS - Insecure LDAP Configuration Detection
The FortiGate LDAP configuration was detected to be insecure due to missing ca-cert, secure LDAPS, or server-identity-check, potentially exposing LDAP communications to credential interception or man-in-the-middle attacks under specific network conditions. id: CVE-2019-5591 info: name: FortiOS -...
Astra Linux – Vulnerability in Ansible
A flaw was discovered in Ansible Engine, affecting versions 2.7.x before 2.7.17, 2.8.x before 2.8.11, and 2.9.x before 2.9.7. It also affects Ansible Tower in versions 3.4.5 and 3.5.5, as well as 3.6.3, when the ldapattr and ldapentry community modules are used. This issue exposes the LDAP bind...
Astra Linux – Vulnerability in Apache Log4j1.2
The JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration, or when the configuration references an LDAP service to which the attacker has access. The attacker can provide a...
Astra Linux – Vulnerability in Samba
MaxQueryDuration is not honored in Samba AD DC LDAP...
Astra Linux – Vulnerability in Samba
The Samba AD DC administration tool, when working against a remote LDAP server, will, by default, send new or reset passwords over a signed-only connection...
Astra Linux – Vulnerability in the 389-DS-base
When binding against a DN during authentication, the response from 389-ds-base will differ depending on whether the DN exists or not. This can be exploited by an unauthenticated attacker to check the existence of an entry in the LDAP database...
Astra Linux – Vulnerability in the 389-DS-base
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, resulting in a crash...
Astra Linux – Vulnerability in the 389-DS-base
A flaw was discovered in the ‘deref’ plugin of 389-ds-base, where it could use the ‘search’ permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes...
Astra Linux – Vulnerability in the 389-DS-base
A flaw was discovered in RHDS 11 and RHDS 12. While browsing entries using LDAP, the system attempts to decode the userPassword attribute instead of the userCertificate attribute, which could lead to sensitive information being leaked. An attacker with a local account where cockpit-389-ds is...
Astra Linux – Vulnerability in the 389-DS-base
A double-free was detected in the way that 389-ds-base handles virtual attribute contexts during persistent searches. An attacker could send a series of search requests, causing the server to behave unexpectedly and potentially crashing it...
Astra Linux – Vulnerability in the 389-DS-base
A flaw was discovered in the 389-ds-base LDAP Server. This issue occurs when performing an Modify DN LDAP operation via the ldap protocol, where the function’s return value is not checked, and a NULL pointer is dereferenced. If a privileged user performs an LDAP MODDN operation after a failed...
RHSA-2026:55424 Red Hat Security Advisory: 389-ds-base security update
Bulletin has no description...
VMware vCenter Server 8.0 < 8.0 U3k / 9.0.x < 9.0.2.0100 / 9.1.x < 9.1.0.0200 Authentication Bypass (VMSA-2026-0006)
The version of VMware vCenter Server installed on the remote host is 8.0 prior to 8.0 Update 3k, or 9.0.x prior to 9.0.2.0100, or 9.1.x prior to 9.1.0.0200. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware vCenter contains an authentication...
VulnCheck KEV: CVE-2026-59309
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system...
CVE-2026-16071 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary
A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name DN. Due to missing validation, the system allows lookups...
sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation
A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...
Important: Red Hat Security Advisory: sssd security update
An update for sssd is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation
A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...
