Every CVE Search/ Get API key

CVE-2021-3652

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either...

6.5 MediumFix available

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

1.49%Up 0.6 points since Apr 19, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Record
CVE-2021-3652
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:P/A:N
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Record
CVE-2021-3652
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2021-26948 No score

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Record
EUVD-2021-26948
Updated
2026-11-02
GitHub AdvisoriesGHSA-qc73-mcqm-3m29 9.8

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either...

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Record
GHSA-qc73-mcqm-3m29
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-287
Updated
2026-11-02
OSV 6.5

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Record
CVE-2021-3652
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2021-3652 6.5

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Record
DEBIAN-CVE-2021-3652
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
Show 13 moreShow less
OSVRHSA-2021:3079 6.5

Red Hat Security Advisory: 389-ds:1.4 security and bug fix update

Record
RHSA-2021:3079
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:3807 6.5

Red Hat Security Advisory: 389-ds-base security and bug fix update

Record
RHSA-2021:3807
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:3906 6.5

Red Hat Security Advisory: 389-ds:1.4 security and bug fix update

Record
RHSA-2021:3906
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:3955 6.5

Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

Record
RHSA-2021:3955
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRLSA-2021:3079 6.5

Low: 389-ds:1.4 security and bug fix update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed (CVE-2021-3652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • A plugin can create an index. Even if the index can be used immediately (for searches) the index remains offline until further reindex (BZ#1983095)

  • On big endian machine, the server fails to identify the operation type (BZ#1980063)

Record
RLSA-2021:3079
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3652 6.5

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Record
UBUNTU-CVE-2021-3652
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVMGASA-2021-0440 No score

Updated 389-ds-base packages fix security vulnerability

Fixed crypt handling of locked accounts. (CVE-2021-3652)

Record
MGASA-2021-0440
Updated
2026-11-02
OSVopenSUSE-SU-2021:1211-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • Update to version 1.4.3.24
  • CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1211-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2801-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • Update to 1.4.4.16
  • CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)
Record
openSUSE-SU-2021:2801-1
Updated
2026-11-02
OSVSUSE-SU-2021:2801-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • Update to 1.4.4.16
  • CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)
Record
SUSE-SU-2021:2801-1
Updated
2026-11-02
OSVSUSE-SU-2021:2857-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • Update to version 1.4.3.24
  • CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)
Record
SUSE-SU-2021:2857-1
Updated
2026-11-02
OSVSUSE-SU-2022:2109-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).
  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
Record
SUSE-SU-2022:2109-1
Updated
2026-11-02
OSVSUSE-SU-2022:2163-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
  • CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
  • CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
  • CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).
Record
SUSE-SU-2022:2163-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
389-ds-base
Debian:12
 before 1.4.4.17-1
1.4.4.17-1
389-ds-base
Debian:13
 before 1.4.4.17-1
1.4.4.17-1
389-ds-base
Debian:10
From an advisory covering 9 CVEs
 before 1.4.0.21-1+deb10u1, plus listed versions
1.4.0.21-1
1.4.0.21-1+deb10u1
389-ds-base
Debian:11
From an advisory covering 9 CVEs
 before 1.4.4.11-2+deb11u1, plus listed versions
1.4.4.11-2
1.4.4.11-2+deb11u1
389-ds-base
Mageia:8
 before 1.4.0.26-8.1.mga8
1.4.0.26-8.1.mga8
389-ds-base
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-devel
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-legacy-tools
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
Show 64 moreShow less
Affected packages
PackageAffectedFixed
389-ds-base-legacy-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-libs
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-snmp
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
python3-lib389
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43
389-ds-base
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::client
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::computenode
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::server
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.10.2-13.el7_9
0:1.3.10.2-13.el7_9
389-ds-base
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-devel
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-legacy-tools
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-legacy-tools-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-libs
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-libs-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-snmp
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base-snmp-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
python3-lib389
Red Hat:rhel_eus:8.2::appstream
 before 0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
0:1.4.2.4-17.module+el8.2.0+12297+55707ea6
389-ds-base
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-debuginfo
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-debugsource
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-devel
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-legacy-tools
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-legacy-tools-debuginfo
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-libs
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-libs-debuginfo
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-snmp
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base-snmp-debuginfo
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
cockpit-389-ds
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
python3-lib389
Red Hat:directory_server:11.4::el8
From an advisory covering 2 CVEs
 before 0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b
389-ds-base
Rocky Linux:8
 before 0:1.4.3.16-19.module+el8.4.0+636+837ee950
0:1.4.3.16-19.module+el8.4.0+636+837ee950
389-ds
SUSE:Linux Enterprise Module for Server Applications 15 SP3
 before 1.4.4.16~git16.c1926dfc6-3.4.1
1.4.4.16~git16.c1926dfc6-3.4.1
389-ds
SUSE:Linux Enterprise Module for Server Applications 15 SP2
 before 1.4.3.24~git13.7b705e743-3.19.1
1.4.3.24~git13.7b705e743-3.19.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 3 CVEs
 before 1.4.0.31~git15.8b9843b0b-150000.4.27.1
1.4.0.31~git15.8b9843b0b-150000.4.27.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Enterprise Storage 6
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
openSUSE:Leap 15.2
 before 1.4.3.24~git13.7b705e743-lp152.2.18.1
1.4.3.24~git13.7b705e743-lp152.2.18.1
389-ds
openSUSE:Leap 15.3
 before 1.4.4.16~git16.c1926dfc6-3.4.1
1.4.4.16~git16.c1926dfc6-3.4.1

History

History
RecordedChangedSources
affected
facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3652 is a medium vulnerability (CVSS 6.5) in Port389 389-ds-base, published August 10, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.49%, the 74th percentile. Fixed in 389-ds-base 1.4.4.17-1.

References

Show 62 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open