Mark Reynolds

1 exploit Active since Mar 2021
CVE-2020-35518 WRITEUP MEDIUM WRITEUP
389 Directory Server < 1.4.3.19 - Unauthenticated LDAP Entry Existence Disclosure
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
CVSS 5.3