CVE-2026-14969

Name of the Vulnerable Software and Affected Versions 389-ds-base (affected versions not specified)

Description A flaw exists in the LDBM backend attribute encryption where a hardcoded static initialization vector is used for AES-CBC and 3DES-CBC operations. This allows an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.