CyberRota Analysis
AI-GeneratedA vulnerability exists in the 389 Directory Server that allows unauthenticated remote attackers to inject LDAP search filters into a specific replication status-check operation. This flaw can lead to the exposure of sensitive server configuration metadata, including replication bind DNs and password storage schemes, potentially compromising the security of the directory service. Organizations using 389 Directory Server should prioritize addressing this vulnerability to mitigate the risk of unauthorized access to critical configuration information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.
Related CVEs
Other vulnerabilities affecting the same vendor(s)