{"schemaVersion":3,"id":"CVE-2020-35518","aliases":["SUSE-SU-2021:0724-1","RHSA-2021:0599","RHSA-2021:1086","RHSA-2021:1243","RHSA-2021:1258","RHSA-2021:2323","UBUNTU-CVE-2020-35518","DEBIAN-CVE-2020-35518","openSUSE-SU-2021:0418-1"],"status":"published","duplicateOf":null,"title":null,"description":"When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.","dates":{"published":"2021-03-26T16:43:08.000Z","modified":"2024-08-04T17:02:08.248Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01538,"percentile":0.74503,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01538},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01538,"percentile":0.74503}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01538,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01538,"percentile":0.74503}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-203","name":"Observable Discrepancy","description":"The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/203.html"}],"affected":[{"vendor":"debian","product":"389-ds-base","name":"389-ds-base","label":"389-ds-base","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/389-ds-base","purlType":"deb","versions":[{"text":"< 1.4.4.10-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.4.10-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"389-ds-base","name":"389-ds-base","label":"389-ds-base","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/389-ds-base","purlType":"deb","versions":[{"text":"< 1.4.3.6-2ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.3.6-2ubuntu0.1~esm1","eol":null,"hubHref":null},{"vendor":"redhat","product":"389_directory_server","name":"389 directory server","label":"389_directory_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.4.3.19","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.4.4.0, < 1.4.4.13","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.3.19 | ≥ 1.4.4.0, < 1.4.4.13 | ≥ 2.0.0, < 2.0.3","eol":null,"hubHref":"/vendor/redhat/389_directory_server"},{"vendor":"redhat","product":"directory_server","name":"directory server","label":"directory_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.0","eol":null,"hubHref":"/vendor/redhat/directory_server"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null},{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0 | 8.0","eol":{"isEol":true,"eolDate":"2024-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7","label":"7 (ELS)","eolFrom":"2024-06-30T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"7.9"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"},{"vendor":"opensuse","product":"389-ds&distro=openSUSE Leap 15.2","name":"389-ds","label":"389-ds&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/389-ds&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 1.4.3.19~git0.bef0b5bed-lp152.2.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.3.19~git0.bef0b5bed-lp152.2.12.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base","name":"389-ds-base","label":"389-ds-base","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.3.10.2-12.el7_9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955 | < 0:1.3.10.2-12.el7_9","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-debuginfo","name":"389-ds-base-debuginfo","label":"389-ds-base-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.3.10.2-12.el7_9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955 | < 0:1.3.10.2-12.el7_9","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-debugsource","name":"389-ds-base-debugsource","label":"389-ds-base-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-debugsource","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-devel","name":"389-ds-base-devel","label":"389-ds-base-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-devel","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.3.10.2-12.el7_9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955 | < 0:1.3.10.2-12.el7_9","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-legacy-tools","name":"389-ds-base-legacy-tools","label":"389-ds-base-legacy-tools","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-legacy-tools","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-legacy-tools-debuginfo","name":"389-ds-base-legacy-tools-debuginfo","label":"389-ds-base-legacy-tools-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-libs","name":"389-ds-base-libs","label":"389-ds-base-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-libs","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.3.10.2-12.el7_9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955 | < 0:1.3.10.2-12.el7_9","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-libs-debuginfo","name":"389-ds-base-libs-debuginfo","label":"389-ds-base-libs-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-libs-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-snmp","name":"389-ds-base-snmp","label":"389-ds-base-snmp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-snmp","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.3.10.2-12.el7_9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955 | < 0:1.3.10.2-12.el7_9","eol":null,"hubHref":null},{"vendor":"redhat","product":"389-ds-base-snmp-debuginfo","name":"389-ds-base-snmp-debuginfo","label":"389-ds-base-snmp-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/389-ds-base-snmp-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","eol":null,"hubHref":null},{"vendor":"redhat","product":"cockpit-389-ds","name":"cockpit-389-ds","label":"cockpit-389-ds","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cockpit-389-ds","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","eol":null,"hubHref":null},{"vendor":"redhat","product":"python3-lib389","name":"python3-lib389","label":"python3-lib389","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python3-lib389","purlType":"rpm","versions":[{"text":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.3.21-3.module+el8dsrv+10401+3d549418","noFixRecorded":false,"fixedIn":null},{"text":"< 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.2.12-5.module+el8dsrv+9896+eb95346c | < 0:1.4.3.8-7.module+el8.3.0+10310+6e88d919 | < 0:1.4.3.21-3.module+el8dsrv+10401+3d549418 | < 0:1.4.2.4-13.module+el8.2.0+10648+abe88955","eol":null,"hubHref":null},{"vendor":"suse","product":"389-ds&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2","name":"389-ds","label":"389-ds&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/389-ds&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 1.4.3.19~git0.bef0b5bed-3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.3.19~git0.bef0b5bed-3.12.1","eol":null,"hubHref":null}],"affectedCount":19,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905565","label":"bugzilla.redhat.com/show_bug.cgi?id=1905565","hostname":"bugzilla.redhat.com","tags":["X Refsource MISC","REPORT","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://github.com/389ds/389-ds-base/issues/4480","label":"github.com/389ds/389-ds-base/issues/4480","hostname":"github.com","tags":["X Refsource MISC","REPORT","Patch","Third Party Advisory"]},{"url":"https://github.com/389ds/389-ds-base/commit/cc0f69283abc082488824702dae485b8eae938bc","label":"github.com/389ds/389-ds-base/commit/cc0f69283abc082488824702dae485b8eae938bc","hostname":"github.com","tags":["X Refsource MISC","Patch","Third Party Advisory"]},{"url":"https://github.com/389ds/389-ds-base/commit/b6aae4d8e7c8a6ddd21646f94fef1bf7f22c3f32","label":"github.com/389ds/389-ds-base/commit/b6aae4d8e7c8a6ddd21646f94fef1bf7f22c3f32","hostname":"github.com","tags":["X Refsource MISC","Patch","Third Party Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210724-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20210724-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1181159","label":"bugzilla.suse.com/1181159","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35518","label":"www.suse.com/security/cve/CVE-2020-35518","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0599","label":"access.redhat.com/errata/RHSA-2021:0599","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1909675","label":"bugzilla.redhat.com/show_bug.cgi?id=1909675","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923217","label":"bugzilla.redhat.com/show_bug.cgi?id=1923217","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0599.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0599.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-35518","label":"access.redhat.com/security/cve/CVE-2020-35518","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-35518","label":"www.cve.org/CVERecord?id=CVE-2020-35518","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35518","label":"nvd.nist.gov/vuln/detail/CVE-2020-35518","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1086","label":"access.redhat.com/errata/RHSA-2021:1086","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908705","label":"bugzilla.redhat.com/show_bug.cgi?id=1908705","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912481","label":"bugzilla.redhat.com/show_bug.cgi?id=1912481","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936461","label":"bugzilla.redhat.com/show_bug.cgi?id=1936461","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1086.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1086.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1243","label":"access.redhat.com/errata/RHSA-2021:1243","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751082","label":"bugzilla.redhat.com/show_bug.cgi?id=1751082","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859215","label":"bugzilla.redhat.com/show_bug.cgi?id=1859215","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859288","label":"bugzilla.redhat.com/show_bug.cgi?id=1859288","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925537","label":"bugzilla.redhat.com/show_bug.cgi?id=1925537","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927051","label":"bugzilla.redhat.com/show_bug.cgi?id=1927051","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930272","label":"bugzilla.redhat.com/show_bug.cgi?id=1930272","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937036","label":"bugzilla.redhat.com/show_bug.cgi?id=1937036","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1243.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1243.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1258","label":"access.redhat.com/errata/RHSA-2021:1258","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946631","label":"bugzilla.redhat.com/show_bug.cgi?id=1946631","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946632","label":"bugzilla.redhat.com/show_bug.cgi?id=1946632","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946634","label":"bugzilla.redhat.com/show_bug.cgi?id=1946634","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1258.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1258.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2323","label":"access.redhat.com/errata/RHSA-2021:2323","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931182","label":"bugzilla.redhat.com/show_bug.cgi?id=1931182","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953673","label":"bugzilla.redhat.com/show_bug.cgi?id=1953673","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2323.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2323.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-35518","label":"ubuntu.com/security/CVE-2020-35518","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5231-1","label":"ubuntu.com/security/notices/USN-5231-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-35518","label":"security-tracker.debian.org/tracker/CVE-2020-35518","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IJZAIJRIBNKFP5CET6TYMJ3FGMU6WYAM/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["USN-5231-1"],"duplicates":[],"related":["USN-5231-1"]},"timeline":[{"kind":"published","date":"2021-03-26T16:43:08.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T17:02:08.248Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:45:21.669Z","stale":false,"partial":false}}