vulnerability
Huawei EulerOS: CVE-2019-13057: openldap security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:S/C:P/I:N/A:N) | Jul 26, 2019 | Sep 25, 2019 | Apr 1, 2026 |
Severity
4
CVSS
(AV:N/AC:M/Au:S/C:P/I:N/A:N)
Published
Jul 26, 2019
Added
Sep 25, 2019
Modified
Apr 1, 2026
Description
An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)
Solutions
huawei-euleros-2_0_sp3-upgrade-openldaphuawei-euleros-2_0_sp3-upgrade-openldap-clientshuawei-euleros-2_0_sp3-upgrade-openldap-develhuawei-euleros-2_0_sp3-upgrade-openldap-servers
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.