Improper authorization control for web services In 389-ds-base
Description
389 Directory Server 1.2.10 does not properly update the ACL when a DN entry is moved by a modrdn operation, which allows remote authenticated users with certain permissions to bypass ACL restrictions and access the DN entry.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 1.2.11.15-1 | ||
debian 11 | 1.2.11.15-1 | ||
debian 13 | 1.2.11.15-1 | ||
 rpm rhel6 | 0:1.2.11.15-11.el6 |
Aliases
1. 2. 3. 4. 5.