An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)
Se detectó un problema en el servidor en OpenLDAP anterior a versión 2.4.48. Cuando el administrador del servidor delega los privilegios de tipo rootDN (administrador de base de datos) para ciertas bases de datos, pero quiere mantener el aislamiento (por ejemplo, para implementaciones de múltiples inquilinos), slapd no detiene apropiadamente un rootDN de solicitar una autorización como una identidad de otra base de datos durante un enlace SASL o con un control proxyAuthz (RFC 4370). (No es una configuración común implementar un sistema donde el administrador del servidor y el administrador de la base de datos disfruten de diferentes niveles de confianza).
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | HIGH |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:N/AC:M/Au:S/C:P/I:N/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | SINGLE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| openldap | openldap | * | <built-in method update of dict object at 0x7fd36b448e80> | Application |
| canonical | ubuntu_linux | 12.04 | <built-in method update of dict object at 0x7fd36be62cc0> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x7fd36a7ec900> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x7fd384239980> | Operating System |
| canonical | ubuntu_linux | 18.04 | <built-in method update of dict object at 0x7fd36b448dc0> | Operating System |
| canonical | ubuntu_linux | 19.04 | <built-in method update of dict object at 0x7fd36b448980> | Operating System |
| debian | debian_linux | 8.0 | <built-in method update of dict object at 0x7fd38677d040> | Operating System |
| opensuse | leap | 15.0 | <built-in method update of dict object at 0x7fd319eb8e00> | Operating System |
| opensuse | leap | 15.1 | <built-in method update of dict object at 0x7fd36afa6240> | Operating System |
| apple | mac_os_x | * | <built-in method update of dict object at 0x7fd36b233680> | Operating System |
| apple | mac_os_x | * | <built-in method update of dict object at 0x7fd36a02fbc0> | Operating System |
| apple | mac_os_x | * | <built-in method update of dict object at 0x7fd319eb8380> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd342023fc0> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd36b44ad40> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd319eb9240> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd342023bc0> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd3694e5c80> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd36b449440> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd36b449d80> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd34948ce00> | Operating System |
| apple | mac_os_x | 10.13.6 | <built-in method update of dict object at 0x7fd36b3f8240> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x7fd319ebba00> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x7fd3408f6380> | Operating System |
| apple | mac_os_x | 10.14.6 | <built-in method update of dict object at 0x7fd36be61a80> | Operating System |
| mcafee | policy_auditor | * | <built-in method update of dict object at 0x7fd3420b85c0> | Application |
| mcafee | policy_auditor | 6.5.1 | <built-in method update of dict object at 0x7fd3849165c0> | Application |
| oracle | blockchain_platform | * | <built-in method update of dict object at 0x7fd319eba8c0> | Application |
| oracle | zfs_storage_appliance_kit | 8.8 | <built-in method update of dict object at 0x7fd36b556840> | Application |
| oracle | solaris | 11 | <built-in method update of dict object at 0x7fd34948ec40> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:mcafee:policy_auditor:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:mcafee:policy_auditor:6.5.1:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:* |