PT-2026-86805 · Opensuse+2 · 389-Ds+29
CVE-2026-76560
·
Published
2026-09-07
·
Updated
2026-09-10
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user.
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
389-Ds
389-Ds-Base
389-Ds-Base-Devel
389-Ds-Base-Libs
389-Ds-Base-Snmp
Red Hat Directory Server 11
Red Hat Directory Server 11.7 E4S For Rhel 8
Red Hat Directory Server 11.9 For Rhel 8
Red Hat Directory Server 12
Red Hat Directory Server 12.2 E4S For Rhel 9
Red Hat Directory Server 12.4 E4S For Rhel 9
Red Hat Directory Server 13
Red Hat Directory Server 13.2
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 10.0 Extended Update Support
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions
Red Hat Enterprise Linux 9
Red Hat Enterprise Linux 9.2 Update Services For Sap Solutions
Red Hat Enterprise Linux 9.4 Update Services For Sap Solutions
Red Hat Enterprise Linux 9.6 Extended Update Support
Python3-Lib389