389-ds-base: access control bypass
| Package(s): | 389-ds-base | CVE #(s): | CVE-2015-1854 | ||||||||||||||||
| Created: | April 29, 2015 | Updated: | May 4, 2015 | ||||||||||||||||
| Description: | From the Red Hat advisory:
A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server. (CVE-2015-1854) | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||