CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
Affected Products (NVD)
VendorProductVersion
redhat389_directory_server
1.4.0.0
redhatenterprise_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
389-ds-base
bookworm
2.3.1+dfsg1-1
fixed
bullseye
no-dsa
sid
3.1.1+dfsg1-2
fixed
trixie
3.1.1+dfsg1-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
389-ds-base
bionic
needs-triage
focal
needs-triage
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
ignored
xenial
needs-triage
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
389-ds-base
RHEL 7
0:1.3.10.2-16.el7_9
fixed
RHEL 9
0:2.1.3-4.el9_1
fixed
389-ds-base-devel
RHEL 7
0:1.3.10.2-16.el7_9
fixed
389-ds-base-libs
RHEL 7
0:1.3.10.2-16.el7_9
fixed
RHEL 9
0:2.1.3-4.el9_1
fixed
389-ds-base-snmp
RHEL 7
0:1.3.10.2-16.el7_9
fixed
python3-lib389
RHEL 9
0:2.1.3-4.el9_1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
389-ds-base
Amazon Linux 2
0:1.3.10.2-16.amzn2.0.1
fixed
389-ds-base-debuginfo
Amazon Linux 2
0:1.3.10.2-16.amzn2.0.1
fixed
389-ds-base-devel
Amazon Linux 2
0:1.3.10.2-16.amzn2.0.1
fixed
389-ds-base-libs
Amazon Linux 2
0:1.3.10.2-16.amzn2.0.1
fixed
389-ds-base-snmp
Amazon Linux 2
0:1.3.10.2-16.amzn2.0.1
fixed
Common Weakness Enumeration
References
https://bugzilla.redhat.com/show_bug.cgi?id=2064769
https://github.com/ByteHackr/389-ds-base
https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QFD7CBBX3IZOSHEWL2EYKRLOEQSXCZ6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYT2IQJFHQWZENJJRY6EJB3XIFZGNT7F/
https://bugzilla.redhat.com/show_bug.cgi?id=2064769
https://github.com/ByteHackr/389-ds-base
https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QFD7CBBX3IZOSHEWL2EYKRLOEQSXCZ6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYT2IQJFHQWZENJJRY6EJB3XIFZGNT7F/