← Back

Openldap Servers

openldap-servers

Vendor: Openldap • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-4984
1Openldap
1Openldap Servers
May 13, 2026
Jul 17, 2017
N/A· v4
4.7 MEDIUM· v3
1.9 LOW· v2
/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS certificate by leveraging a race condition between the creation...Show more
/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS certificate by leveraging a race condition between the creation of the certificate, and the chmod to protect it.Show less