8.4Yüksek
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create …