CVE-2020-15719

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.

• CWE-295

• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.htmlMailing List, Third Party Advisory
• https://access.redhat.com/errata/RHBA-2019:3674Third Party Advisory
• https://bugs.openldap.org/show_bug.cgi?id=9266Permissions Required, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1740070Issue Tracking, Third Party Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10365Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2022.htmlPatch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.htmlMailing List, Third Party Advisory
• https://access.redhat.com/errata/RHBA-2019:3674Third Party Advisory
• https://bugs.openldap.org/show_bug.cgi?id=9266Permissions Required, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1740070Issue Tracking, Third Party Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10365Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2022.htmlPatch, Third Party Advisory

Published

Jul 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15713rConfig 3.9.5 is vulnerable to SQL injection. A remote authe…8.8
• CVE-2020-15714rConfig 3.9.5 is vulnerable to SQL injection. A remote authe…8.8
• CVE-2020-15715rConfig 3.9.5 could allow a remote authenticated attacker to…9.9
• CVE-2020-15716RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper va…6.1
• CVE-2020-15717RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper va…6.1
• CVE-2020-15718RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper va…6.1
• CVE-2020-15720In Dogtag PKI through 10.8.3, the pki.client.PKIConnection c…6.8
• CVE-2020-15721RosarioSIS through 6.8-beta allows modules/Custom/NotifyPare…6.1
• CVE-2020-15722In version 12.1.0.1004 and below of 360 Total Security,when …7.8
• CVE-2020-15723In the version 12.1.0.1004 and below of 360 Total Security, …7.8
• CVE-2020-15724In the version 12.1.0.1005 and below of 360 Total Security, …7.8
• CVE-2020-15728Rejected reason: Unused CVE for 2020