CVE-2024-3657 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
redhat	CNA	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 68%

Debian Releases

Debian Product

Codename

389-ds-base

bullseye	vulnerable
bullseye (security)	1.4.4.11-2+deb11u1 fixed
bookworm	2.3.1+dfsg1-1+deb12u1 fixed
sid	3.1.2+dfsg1-1 fixed
trixie	3.1.2+dfsg1-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

389-ds-base

questing	needs-triage
plucky	needs-triage
oracular	ignored
noble	needs-triage
mantic	ignored
jammy	needs-triage
focal	needs-triage
bionic	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

https://access.redhat.com/errata/RHSA-2024:3591

https://access.redhat.com/errata/RHSA-2024:3837

https://access.redhat.com/errata/RHSA-2024:4092

https://access.redhat.com/errata/RHSA-2024:4209

https://access.redhat.com/errata/RHSA-2024:4210

https://access.redhat.com/errata/RHSA-2024:4235

https://access.redhat.com/errata/RHSA-2024:4633

https://access.redhat.com/errata/RHSA-2024:5690

https://access.redhat.com/errata/RHSA-2024:6576

https://access.redhat.com/errata/RHSA-2024:7458

https://access.redhat.com/errata/RHSA-2025:1632

https://access.redhat.com/security/cve/CVE-2024-3657

https://bugzilla.redhat.com/show_bug.cgi?id=2274401

https://access.redhat.com/errata/RHSA-2024:3591

https://access.redhat.com/errata/RHSA-2024:3837

https://access.redhat.com/errata/RHSA-2024:4092

https://access.redhat.com/errata/RHSA-2024:4209

https://access.redhat.com/errata/RHSA-2024:4210

https://access.redhat.com/errata/RHSA-2024:4235

https://access.redhat.com/errata/RHSA-2024:4633

https://access.redhat.com/security/cve/CVE-2024-3657

https://bugzilla.redhat.com/show_bug.cgi?id=2274401

https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html