Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2021-3652

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled. (CVE-2021-3652)

Source

ALAS-2022-1619

Amazon Linux AMI Security Advisory: ALAS-2022-1619
Advisory Release Date: 2022-07-28 20:30 Pacific
Advisory Updated Date: 2022-08-04 22:38 Pacific

Severity: Low

References: CVE-2021-3652

Issue Overview:

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successf
ully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled. (CVE-2021-3652)

Affected Packages:

389-admin

Issue Correction:
Run yum update 389-admin to update your system.

New Packages:

i686:
    389-admin-debuginfo-1.1.46-5.14.amzn1.i686
    389-admin-1.1.46-5.14.amzn1.i686

src:
    389-admin-1.1.46-5.14.amzn1.src

x86_64:
    389-admin-1.1.46-5.14.amzn1.x86_64
    389-admin-debuginfo-1.1.46-5.14.amzn1.x86_64

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS-2022-1619

ALAS-2022-1619

Vulmon Search

About

Products

Connect