ELSA-2015-0895 -- Oracle 389-ds-base
|ID: oval:org.secpod.oval:def:1501002||Date: (C)2015-05-04 (M)2017-11-15|
|Class: PATCH||Family: unix|
A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server.