CVE-2022-1949
published 2022-06-02CVE-2022-1949: An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can…
PriorityP347high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
1.39%
69.2th percentile
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | 389-ds-base | < 389-ds-base 2.3.1-1 (bookworm) | 389-ds-base 2.3.1-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| port389 | 389-ds-base | >= 0 < 2.3.1-1 | 2.3.1-1 |
| port389 | 389-ds-base | >= 0 < 2.3.1-1 | 2.3.1-1 |
| redhat | 389_directory_server | 1.3.0.0 – 2.0.0 | — |
| redhat | directory_server | — | — |
| redhat | directory_server | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
389-ds-base: access control bypass by query (filter in LDAP terms) optimiser
vendor_redhat·2022-05-31·CVSS 7.5
CVE-2022-1949 [HIGH] CWE-863 389-ds-base: access control bypass by query (filter in LDAP terms) optimiser
389-ds-base: access control bypass by query (filter in LDAP terms) optimiser
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
A flaw was found in the 389-ds-base package where some LDAP queries can cause performance issues. This flaw allows an attacker to send a non-optimal search that causes serious performance issues within the directory server.
Package: redhat-ds:11/389-ds-base (Red Hat Directory Se
Debian
CVE-2022-1949: 389-ds-base - An access control bypass vulnerability found in 389-ds-base. That mishandling of...
vendor_debian·2022·CVSS 7.5
CVE-2022-1949 [HIGH] CVE-2022-1949: 389-ds-base - An access control bypass vulnerability found in 389-ds-base. That mishandling of...
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
Scope: local
bookworm: resolved (fixed in 2.3.1-1)
bullseye: open
sid: resolved (fixed in 2.3.1-1)
trixie: resolved (fixed in 2.3.1-1)
GHSA
GHSA-x847-vxvj-g6rj: An access control bypass vulnerability found in 389-ds-base
ghsa_unreviewed·2022-06-03
CVE-2022-1949 [HIGH] CWE-639 GHSA-x847-vxvj-g6rj: An access control bypass vulnerability found in 389-ds-base
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
OSV
CVE-2022-1949: An access control bypass vulnerability found in 389-ds-base
osv·2022-06-02·CVSS 7.5
CVE-2022-1949 [HIGH] CVE-2022-1949: An access control bypass vulnerability found in 389-ds-base
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-06-02
Published