← Database

CVE-2024-8445

MEDIUM CVSS: 5.7 Published: 2024-09-05 Modified: 2026-06-17

Description

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying `userPassword` using malformed input.

Affected Platforms

Unknown

Weakness Type

CWE-20

References