https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:31:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04434 bdu:2022-04434 https://cve.radiocsirt.org/vuln/bdu:2022-04434 https://cve.radiocsirt.org/vuln/euvd-2026-12073 EUVD-2026-12073 https://cve.radiocsirt.org/vuln/euvd-2026-12073 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1949 <p>An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.</p> <p>An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1949 https://cve.radiocsirt.org/vuln/ghsa-x847-vxvj-g6rj <p>An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.</p> <p>An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.</p> https://cve.radiocsirt.org/vuln/ghsa-x847-vxvj-g6rj https://cve.radiocsirt.org/vuln/gsd-2022-1949 gsd-2022-1949 https://cve.radiocsirt.org/vuln/gsd-2022-1949 https://cve.radiocsirt.org/vuln/oesa-2024-2164 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: three-eight-nine-ds-base</p> <p>389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.(CVE-2022-1949) A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: three-eight-nine-ds-base</p> <p>389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.(CVE-2022-1949) A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2164 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1949 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base</p> <p>An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1949