CVE-2017-15135

Name of the Vulnerable Software and Affected Versions: 389-ds-base versions 1.3.6.1 through 1.4.0.3

Description: The issue is related to incorrect handling of internal hash comparison operations during the authentication process. This could potentially allow a remote, unauthenticated attacker to bypass the authentication process under rare and specific circumstances. The vulnerability may enable an attacker to access confidential data.

Recommendations: For versions 1.3.6.1 through 1.4.0.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.