VYPR
Get started
← All advisories
Critical severity9.8NVD Advisory· Published Aug 16, 2017· Updated May 13, 2026

CVE-2017-7551

CVE-2017-7551

Description

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

Affected products

3
  • Fedoraproject/389 Directory Server2 versions
    cpe:2.3:a:fedoraproject:389_directory_server:1.3.5.19:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fedoraproject:389_directory_server:1.3.5.19:*:*:*:*:*:*:*
    • cpe:2.3:a:fedoraproject:389_directory_server:1.3.6.7:*:*:*:*:*:*:*
  • 389 Directory Server/389 Ds Basev5
    Range: before 1.3.5.19 and 1.3.6.7

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.