Information disclosure in 389-ds-base - CVE-2020-35518

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU54105

Information disclosure in 389-ds-base - CVE-2020-35518

Published: June 15, 2021


Vulnerability identifier: #VU54105
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-35518
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.


Affected software

389-ds-base
Red Hat Directory Server
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
CentOS
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
SUSE Linux Enterprise Module for Server Applications
openEuler
Fedora
389-ds-base (Red Hat package)
python3-lib389
389-ds-base-snmp
389-ds-base-libs
389-ds-base-legacy-tools
389-ds-base-devel
389-ds-base
389-ds
389-ds-debuginfo
389-ds-debugsource
389-ds-devel
lib389
libsvrcore0
libsvrcore0-debuginfo
389-ds-base-debuginfo
389-ds-base-debugsource
389-ds-base-help
cockpit-389-ds
freeipa
dogtag-pki
pki-core

How to mitigate CVE-2020-35518

Install updates from vendor's website.

389-ds-base - addressed in versions 1.4.3.19, 1.4.4.13, 2.0.3
389-ds-base (Red Hat package) - update to 1.3.10.2-12.el7_9
python3-lib389 - update to 1.4.2.4-13
389-ds-base-snmp - update to 1.4.2.4-13
389-ds-base-libs - update to 1.4.2.4-13
389-ds-base-legacy-tools - update to 1.4.2.4-13
389-ds-base-devel - update to 1.4.2.4-13
389-ds-base - update to 1.4.2.4-13
389-ds - update to 1.4.3.19~git0.bef0b5bed-3.12.1
389-ds-debuginfo - update to 1.4.3.19~git0.bef0b5bed-3.12.1
389-ds-debugsource - update to 1.4.3.19~git0.bef0b5bed-3.12.1
389-ds-devel - update to 1.4.3.19~git0.bef0b5bed-3.12.1
lib389 - update to 1.4.3.19~git0.bef0b5bed-3.12.1
libsvrcore0 - update to 1.4.3.19~git0.bef0b5bed-3.12.1
libsvrcore0-debuginfo - update to 1.4.3.19~git0.bef0b5bed-3.12.1
389-ds-base - addressed in versions 1.4.3.19-1.fc32, 1.4.3.20-2.fc32, 1.4.4.13-2.fc33, 2.0.3-3.fc34
python3-lib389 - update to 1.4.3.20-1
389-ds-base-devel - update to 1.4.3.20-1
389-ds-base-snmp - update to 1.4.3.20-1
389-ds-base-debuginfo - update to 1.4.3.20-1
389-ds-base-debugsource - update to 1.4.3.20-1
389-ds-base-help - update to 1.4.3.20-1
389-ds-base-legacy-tools - update to 1.4.3.20-1
389-ds-base - update to 1.4.3.20-1
cockpit-389-ds - update to 1.4.3.20-1
freeipa - addressed in versions 4.9.2-4.fc32, 4.9.2-4.fc33, 4.9.2-4.fc34
dogtag-pki - addressed in versions 10.10.5-1.fc32, 10.10.5-1.fc33, 10.10.5-1.fc34
pki-core - addressed in versions 10.10.5-1.fc32, 10.10.5-1.fc33, 10.10.5-1.fc34

External References

Related Security Bulletins