Medium severity · published Mar 26, 2021
CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not
5.3
CVSS
1.5%
EPSS
No
On KEV
Description
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
3D
389 Directory Server · Redhat
before 1.4.3.19; 1.4.4.0 before 1.4.4.13; 2.0.0 before 2.0.3 · source: NVD
DS
Directory Server · Redhat
11.0 · source: NVD
EL
Enterprise Linux · Redhat
7.0; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-35518
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-35518
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1905565
Patch
https://github.com/389ds/389-ds-base/commit/b6aae4d8e7c8a6ddd21646f94fef1bf7f22c3f32
Patch
https://github.com/389ds/389-ds-base/commit/cc0f69283abc082488824702dae485b8eae938bc
Patch
https://github.com/389ds/389-ds-base/issues/4480
More from 389 Directory Server
7.5
CVE-2026-11770
389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
7.5
CVE-2026-15722
389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
7.5
CVE-2026-11788
389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
7.5
CVE-2026-9064
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
7.5
CVE-2022-1949
An access control bypass vulnerability found in 389-ds-base