vulnerability

Alma Linux: CVE-2021-3652: Low: 389-ds:1.4 security and bug fix update (ALSA-2021-3079)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:L/Au:N/C:P/I:P/A:N)	Apr 18, 2022	May 4, 2022	Aug 11, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published

Apr 18, 2022

Added

May 4, 2022

Modified

Aug 11, 2025

Description

A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.

Solutions

alma-upgrade-389-ds-basealma-upgrade-389-ds-base-develalma-upgrade-389-ds-base-legacy-toolsalma-upgrade-389-ds-base-libsalma-upgrade-389-ds-base-snmpalma-upgrade-python3-lib389

References

CVE-2021-3652
https://attackerkb.com/topics/CVE-2021-3652
CWE-287
URL-https://errata.almalinux.org/8/ALSA-2021-3079.html

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today