Giriş API Anahtarı Al

directory server e2s 13.0 güvenlik açıkları (CVE)

directory server e2s 13.0 için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

1 sonuç

8.4Yüksek

CVE-2026-19843 2 ay önce

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8; Red Hat Red Hat Directory Server 12.2 E4S for RHEL 9

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create …