Improper authentication in 389-ds-base - CVE-2017-15135

Vulnerability identifier: #VU11126

CSH Severity: Low

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-15135

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote unauthenticated attacker to bypass authentication on the target system.

The weakness exists due to improper handling of internal hash comparison operations. A remote attacker can bypass the authentication process.

389-ds-base
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
Opensuse

Install update from vendor's website.

• https://access.redhat.com/errata/RHSA-2018:0414
• https://access.redhat.com/errata/RHSA-2018:0515

• Authentication bypass in 389-ds-base
• Amazon Linux AMI update for 389-ds-base
• OpenSUSE Linux update for 389-ds
• Red Hat update for 389-ds-base
• Red Hat update for 389-ds-base