Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-31T09:00:00 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE-90

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.

A Moderate impact information disclosure flaw was found in 389 Directory Server. An unauthenticated remote attacker can exploit an LDAP filter injection vulnerability in the CleanAllRUV status-check extended operation. Red Hat products with `nsslapd-allow-anonymous-access` enabled by default are particularly susceptible. This issue was discovered by Ian Murphy (Red Hat). Set nsslapd-allow-anonymous-access to rootdse or off. Restrict LDAP ports to trusted networks. Monitor for extop OID 2.16.840.1.113730.3.6.8. Use strong replication manager passwords. Red Hat Directory Server 11 Affected redhat-ds:11/389-ds-base Red Hat Directory Server 12 Affected redhat-ds:12/389-ds-base Red Hat Directory Server 13 Affected 389-ds-base Red Hat Enterprise Linux 10 Affected 389-ds-base Red Hat Enterprise Linux 6 Out of support scope 389-ds-base Red Hat Enterprise Linux 7 Affected 389-ds-base Red Hat Enterprise Linux 8 Affected 389-ds-base Red Hat Enterprise Linux 9 Affected 389-ds-base https://www.cve.org/CVERecord?id=CVE-2026-11770 https://nvd.nist.gov/vuln/detail/CVE-2026-11770 https://github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/replication/repl_extop.c