Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 08:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property

cve-program · CVE-2026-18922

Published

redhat-ds:11

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Directory Server 11.5 E4S for RHEL 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "redhat-ds:11",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8060020260908152739.0ca98e7e",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:directory_server_e4s:11.5::el8"
                    ]
                }

redhat-ds:11

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Directory Server 11.7 E4S for RHEL 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "redhat-ds:11",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8080020260903102346.f969626e",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:directory_server_e4s:11.7::el8"
                    ]
                }

redhat-ds:11

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Directory Server 11.9 for RHEL 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "redhat-ds:11",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8100020260904171440.37ed7c03",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:directory_server:11.9::el8"
                    ]
                }

redhat-ds:12

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Directory Server 12.2 E4S for RHEL 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "redhat-ds:12",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "9020020260903155914.1674d574",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:directory_server_e4s:12.2::el9"
                    ]
                }

redhat-ds:12

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Directory Server 12.4 E4S for RHEL 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "redhat-ds:12",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "9040020260903102623.1674d574",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:directory_server_e4s:12.4::el9"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.2.0-10.el10_2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:10.2"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.0.6-21.el10_0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux_eus:10.0"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.2.11.15-97.el6_10.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:6"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.3.11.1-15.el7_9",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:7"
                    ]
                }

389-ds:1.4

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds:1.4",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8100020260904155442.25e700aa",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream"
                    ]
                }

389-ds:1.4

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds:1.4",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8040020260901171549.96015a92",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
                    ]
                }

389-ds:1.4

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds:1.4",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8040020260901171549.96015a92",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
                    ]
                }

389-ds:1.4

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds:1.4",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8060020260901145727.824efc52",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
                    ]
                }

389-ds:1.4

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds:1.4",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8060020260901145727.824efc52",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
                    ]
                }

389-ds:1.4

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds:1.4",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8080020260831180218.6dbb3803",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:8.8::appstream",
                        "cpe:/a:redhat:rhel_tus:8.8::appstream"
                    ]
                }

389-ds:1.4

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds:1.4",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "8080020260831180218.6dbb3803",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:8.8::appstream",
                        "cpe:/a:redhat:rhel_tus:8.8::appstream"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.8.0-10.el9_8",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:9::appstream",
                        "cpe:/a:redhat:enterprise_linux:9::crb"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.2.4-22.el9_2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:9.2::appstream"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.4.5-29.el9_4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:9.4::appstream"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.6.1-24.el9_6",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_eus:9.6::appstream",
                        "cpe:/a:redhat:rhel_eus:9.6::crb"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Directory Server 12",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:directory_server:12"
                    ]
                }

389-ds-base

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Directory Server 13",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "389-ds-base",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/a:redhat:directory_server:13"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 08:56 UTC · 275 of 275 readable · 274 fully read · documentation 469/469 current