CVE-2017-15135
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.8%
probabilidade de exploração
3.8%top 11% das CVEs
exploração observada
nãonenhuma fonte reporta
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.
Produtos afetados
Red Hat, Inc. · 389-ds-base