CVE-2020-15719 Security feature bypass in n/a
Attackers can bypass certificate validation in OpenLDAP libraries when RFC6125 support is enabled, allowing man-in-the-middle attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-15719?
CVE-2020-15719 is a medium-severity vulnerability in Openldap Openldap, published on 14 Jul 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.
Weakness: CWE-295
Which versions are affected by CVE-2020-15719?
1 open source package ship an affected version, including openldap. It affects 5 products.
| Package | Affected | Fixed in |
|---|---|---|
openldap Bitnami | All versions | 2.4.46-10.el8 |
Linux distribution packages (15)
openldap Red Hat:enterprise_linux:8::baseos | All versions | 0:2.4.46-10.el8 |
openldap-clients Red Hat:enterprise_linux:8::baseos | All versions | 0:2.4.46-10.el8 |
openldap-clients-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:2.4.46-10.el8 |
openldap-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:2.4.46-10.el8 |
openldap-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:2.4.46-10.el8 |
openldap-devel Red Hat:enterprise_linux:8::baseos | All versions | 0:2.4.46-10.el8 |
openldap-servers-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:2.4.46-10.el8 |
openldap2 SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 2.4.46-9.34.1 |
openldap2 SUSE:Linux Enterprise Module for Basesystem 15 SP2 | All versions | 2.4.46-9.34.1 |
openldap2 SUSE:Linux Enterprise Module for Development Tools 15 SP1 | All versions | 2.4.46-9.34.1 |
openldap2 SUSE:Linux Enterprise Module for Development Tools 15 SP2 | All versions | 2.4.46-9.34.1 |
openldap2 SUSE:Linux Enterprise Module for Legacy 15 SP1 | All versions | 2.4.46-9.34.1 |
openldap2 SUSE:Linux Enterprise Module for Legacy 15 SP2 | All versions | 2.4.46-9.34.1 |
openldap2 openSUSE:Leap 15.1 | All versions | 2.4.46-lp151.10.15.1 |
openldap2 openSUSE:Leap 15.2 | All versions | 2.4.46-lp152.14.6.1 |
Products include Mcafee Policy Auditor, Openldap Openldap, Opensuse Leap, Oracle Blockchain Platform, Redhat Enterprise Linux.
How do I fix CVE-2020-15719?
Upgrade openldap to 2.4.46-10.el8 or later.
Is CVE-2020-15719 being exploited?
There is no known exploitation of CVE-2020-15719 in the wild and no public exploit code.
Other vulnerabilities in Openldap Openldap
Sources
Also known as BIT-openldap-2020-15719, DEBIAN-CVE-2020-15719, ECHO-131f-3301-69b0, GHSA-pg7h-v386-fw8h, RHBA-2019:3674, ROOT-OS-DEBIAN-12-CVE-2020-15719 and 3 more.