← CVE Intelligence

CVE-2017-7551

389 Directory Server / 389-ds-base PUBLISHED

Description (CNA)

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

Affected (CNA)

Vendor / productVersions
389 Directory Server / 389-ds-baseaffected before 1.3.5.19 and 1.3.6.7

CWE

CWE-209

References

ADP enrichment

CVE

No English description supplied.