USN-4078-1

Dashboard / Vulnerabilities / USN-4078-1

USN-4078-1

Summary: openldap vulnerabilities

Details: It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization as an identity from another database, contrary to expectations. (CVE-2019-13057) It was discovered that OpenLDAP incorrectly handled SASL authentication and session encryption. After a first SASL bind was completed, it was possible to obtain access by performing simple binds, contrary to expectations. (CVE-2019-13565)

References: https://ubuntu.com/security/notices/USN-4078-1, https://ubuntu.com/security/CVE-2019-13057, https://ubuntu.com/security/CVE-2019-13565