Strix
26.1K

CVE-2019-13565

HIGHCVSS 7.5/10EPSS 5.01%

Last modified

CVE-2019-13565 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. EPSS estimates a 5.01% chance of exploitation in the next 30 days.

Description

An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
5.01%

91.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
OpenldapOpenldap>= 2.0, <= 2.4.47
CanonicalUbuntu Linux12.04
CanonicalUbuntu Linux14.04
CanonicalUbuntu Linux16.04
CanonicalUbuntu Linux18.04
CanonicalUbuntu Linux19.04
DebianDebian Linux8.0
OpensuseLeap15.0
OpensuseLeap15.1
F5Traffix Signaling Delivery Controller5.0.0
F5Traffix Signaling Delivery Controller5.1.0
AppleMac Os X>= 10.13, < 10.13.6
AppleMac Os X>= 10.14, < 10.14.6
AppleMac Os X>= 10.15, < 10.15.2
AppleMac Os X10.13.6
AppleMac Os X10.14.6
OracleBlockchain Platform< 21.1.2
OracleZfs Storage Appliance Kit8.8
OracleSolaris11

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-13565?
An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.
How severe is CVE-2019-13565?
CVE-2019-13565 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 5.01% probability of exploitation in the next 30 days.
How do I fix CVE-2019-13565?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-13565?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST