{"id":"CVE-2021-3652","aliases":["DEBIAN-CVE-2021-3652","DLA-3399-1","DLA-4021-1","EUVD-2021-26948","GHSA-qc73-mcqm-3m29","MGASA-2021-0440","RHSA-2021:3079","RHSA-2021:3807","RHSA-2021:3906","RHSA-2021:3955","RLSA-2021:3079","SUSE-SU-2021:2801-1","SUSE-SU-2021:2857-1","SUSE-SU-2022:2109-1","SUSE-SU-2022:2163-1","UBUNTU-CVE-2021-3652","openSUSE-SU-2021:1211-1","openSUSE-SU-2021:2801-1"],"status":"published","title":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either...","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01486,"percentile":0.7421,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2021-08-10T12:01:08Z","modified":"2026-10-23T18:03:16Z","fixes":[{"ecosystem":"Debian:12","package":"389-ds-base","fixed_in":["1.4.4.17-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["1.4.4.17-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"389-ds-base","fixed_in":["1.4.0.26-8.1.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","fixed_in":["0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-13.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-lib389","fixed_in":["0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"389-ds-base","fixed_in":["0:1.4.3.16-19.module+el8.4.0+636+837ee950"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"389-ds","fixed_in":["1.4.4.16~git16.c1926dfc6-3.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"389-ds","fixed_in":["1.4.3.24~git13.7b705e743-3.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"389-ds","fixed_in":["1.4.3.24~git13.7b705e743-lp152.2.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"389-ds","fixed_in":["1.4.4.16~git16.c1926dfc6-3.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.17-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.17-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.21-1+deb10u1"}]}],"versions":["1.4.0.21-1"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.11-2+deb11u1"}]}],"versions":["1.4.4.11-2"],"bundled":9},{"source":"osv","ecosystem":"Mageia:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.26-8.1.mga8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+11894+f5bb5c43"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-13.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2.4-17.module+el8.2.0+12297+55707ea6"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.4::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.27-2.module+el8dsrv+12690+c6df6d1b"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-19.module+el8.4.0+636+837ee950"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.16~git16.c1926dfc6-3.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.24~git13.7b705e743-3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git15.8b9843b0b-150000.4.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git15.8b9843b0b-150000.4.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git15.8b9843b0b-150000.4.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git15.8b9843b0b-150000.4.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.24~git13.7b705e743-lp152.2.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.16~git16.c1926dfc6-3.4.1"}]}]}],"products":[{"vendor":"port389","product":"389-ds-base"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982782","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/389ds/389-ds-base/issues/4817","tags":["x_transferred","Patch","Third Party Advisory","fix","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3652","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qc73-mcqm-3m29"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3652","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0440.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29393","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-August/009326.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E6YUB5M37IM7IMXZ65R3QTW6TPO6B3OS/","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3079","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984091","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3079.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3652","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3807","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005435","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3807.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3906","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995778","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3906.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3955","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981833","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3955.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3514","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3514","tags":["advisory"]},{"url":"https://github.com/389ds/389-ds-base/issues/4711","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2021:3079","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212801-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188151","tags":["report"]},{"url":"https://bugzilla.suse.com/1188455","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3652","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212857-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222109-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1195324","tags":["report"]},{"url":"https://bugzilla.suse.com/1199889","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1949","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222163-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1197275","tags":["report"]},{"url":"https://bugzilla.suse.com/1197345","tags":["report"]},{"url":"https://bugzilla.suse.com/1200175","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0996","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3652","tags":["report"]},{"url":"https://github.com/389ds/389-ds-base/commit/aeb90eb0c41fc48541d983f323c627b2e6c328c7","tags":["report"]},{"url":"https://github.com/389ds/389-ds-base/commit/c1926dfc6591b55c4d33f9944de4d7ebe077e964","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2ABU3X6UN2T7T6CM6IV43OUZVX56S5O3/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3652","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","status":"published","published":"2022-04-18T00:00:00Z","modified":"2025-11-03T20:33:48.435Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26948","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","status":"published","published":"2022-04-18T00:00:00Z","modified":"2025-11-03T20:33:48Z","updated_at":"2026-11-02T19:49:32.896597Z"}],"ghsa":[{"id":"GHSA-qc73-mcqm-3m29","title":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either...","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","status":"published","published":"2022-04-19T00:00:50Z","modified":"2025-11-03T21:30:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:18.176646Z"}],"nvd":[{"id":"CVE-2021-3652","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","status":"published","published":"2022-04-18T17:15:15.443Z","modified":"2026-06-17T04:05:30.44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:06.029737Z"}],"osv":[{"id":"CVE-2021-3652","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","status":"published","published":"2022-04-18T17:15:15.443Z","modified":"2026-10-20T10:53:50.649616204Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-3652","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","status":"published","published":"2022-04-18T17:15:15.443Z","modified":"2026-10-23T18:03:16.068564127Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"RHSA-2021:3079","title":"Red Hat Security Advisory: 389-ds:1.4 security and bug fix update","status":"published","published":"2024-09-16T06:08:15Z","modified":"2025-11-22T12:23:26Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3807","title":"Red Hat Security Advisory: 389-ds-base security and bug fix update","status":"published","published":"2024-09-16T06:08:22Z","modified":"2026-06-26T12:22:09.768359812Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3906","title":"Red Hat Security Advisory: 389-ds:1.4 security and bug fix update","status":"published","published":"2024-09-16T06:08:29Z","modified":"2025-11-22T12:25:34Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3955","title":"Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T06:08:36Z","modified":"2026-06-27T10:14:15Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:3079","title":"Low: 389-ds:1.4 security and bug fix update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed (CVE-2021-3652)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* A plugin can create an index. Even if the index can be used immediately (for searches) the index remains offline until further reindex (BZ#1983095)\n\n* On big endian machine, the server fails to identify the operation type (BZ#1980063)","status":"published","published":"2021-08-10T12:01:08Z","modified":"2026-02-05T00:00:04.915105Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3652","description":"A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.","status":"withdrawn","published":"2022-04-18T17:15:00Z","modified":"2025-07-16T07:42:58.350085Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"DLA-3399-1","title":"389-ds-base - security update","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-03-09T01:20:05.255613Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4021-1","title":"389-ds-base - security update","status":"published","published":"2025-01-19T00:00:00Z","modified":"2026-03-09T01:19:06.435503Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2021-0440","title":"Updated 389-ds-base packages fix security vulnerability","description":"Fixed crypt handling of locked accounts. (CVE-2021-3652)\n","status":"published","published":"2021-09-23T04:49:29Z","modified":"2026-04-16T04:40:39.53297508Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1211-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to version 1.4.3.24\n- CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-08-30T14:07:05Z","modified":"2026-02-04T04:20:52.684229Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:2801-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to 1.4.4.16\n- CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)\n","status":"published","published":"2021-08-20T08:45:36Z","modified":"2026-02-04T02:23:21.90688Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:2801-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to 1.4.4.16\n- CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)\n","status":"published","published":"2021-08-20T08:45:36Z","modified":"2026-02-04T03:30:58.424396Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:2857-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to version 1.4.3.24\n- CVE-2021-3652: Fixed crypt handling of locked accounts. (bsc#1188455)\n","status":"published","published":"2021-08-27T09:59:01Z","modified":"2026-02-04T04:33:11.367533Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:2109-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\t  \n- CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).  \n- CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).\n- CVE-2021-4091: Fixed double free in psearch (bsc#1195324).\n","status":"published","published":"2022-06-16T13:26:57Z","modified":"2026-02-04T04:08:48.604246Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2163-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).\n- CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).\n- CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).\n- CVE-2021-4091: Fixed double free in psearch (bsc#1195324).\n- CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455). \n","status":"published","published":"2022-06-23T12:34:06Z","modified":"2026-02-04T03:18:11.555587Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}