CVE-2017-15135CWE-287

It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the…

published January 24, 2018

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03828 · 90.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2018-01-24T15:00Z
EPSS history
Timeline
  • 24 JAN 15:00Z
    It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the…
    cvelistv5