CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13057

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.7%

CVSS Severity

CVSS v3 Score 4.9

CVSS v2 Score 3.5

References

Products affected by CVE-2019-13057

Mcafee » Policy Auditor » Version: N/A

cpe:2.3:a:mcafee:policy_auditor:-
Mcafee » Policy Auditor » Version: 5.3.0

cpe:2.3:a:mcafee:policy_auditor:5.3.0
Mcafee » Policy Auditor » Version: 5.3.0.167

cpe:2.3:a:mcafee:policy_auditor:5.3.0.167
Mcafee » Policy Auditor » Version: 6.5.1

cpe:2.3:a:mcafee:policy_auditor:6.5.1
Openldap » Openldap » Version: N/A

cpe:2.3:a:openldap:openldap:-
Openldap » Openldap » Version: 2.0

cpe:2.3:a:openldap:openldap:2.0
Openldap » Openldap » Version: 2.3.29

cpe:2.3:a:openldap:openldap:2.3.29
Openldap » Openldap » Version: 2.4

cpe:2.3:a:openldap:openldap:2.4
Openldap » Openldap » Version: 2.4.10

cpe:2.3:a:openldap:openldap:2.4.10
Openldap » Openldap » Version: 2.4.11

cpe:2.3:a:openldap:openldap:2.4.11
Openldap » Openldap » Version: 2.4.12

cpe:2.3:a:openldap:openldap:2.4.12
Openldap » Openldap » Version: 2.4.13

cpe:2.3:a:openldap:openldap:2.4.13
Openldap » Openldap » Version: 2.4.14

cpe:2.3:a:openldap:openldap:2.4.14
Openldap » Openldap » Version: 2.4.15

cpe:2.3:a:openldap:openldap:2.4.15
Openldap » Openldap » Version: 2.4.16

cpe:2.3:a:openldap:openldap:2.4.16
Openldap » Openldap » Version: 2.4.17

cpe:2.3:a:openldap:openldap:2.4.17
Openldap » Openldap » Version: 2.4.18

cpe:2.3:a:openldap:openldap:2.4.18
Openldap » Openldap » Version: 2.4.19

cpe:2.3:a:openldap:openldap:2.4.19
Openldap » Openldap » Version: 2.4.20

cpe:2.3:a:openldap:openldap:2.4.20
Openldap » Openldap » Version: 2.4.21

cpe:2.3:a:openldap:openldap:2.4.21
Openldap » Openldap » Version: 2.4.22

cpe:2.3:a:openldap:openldap:2.4.22
Openldap » Openldap » Version: 2.4.23

cpe:2.3:a:openldap:openldap:2.4.23
Openldap » Openldap » Version: 2.4.24

cpe:2.3:a:openldap:openldap:2.4.24
Openldap » Openldap » Version: 2.4.25

cpe:2.3:a:openldap:openldap:2.4.25
Openldap » Openldap » Version: 2.4.26

cpe:2.3:a:openldap:openldap:2.4.26
Openldap » Openldap » Version: 2.4.27

cpe:2.3:a:openldap:openldap:2.4.27
Openldap » Openldap » Version: 2.4.28

cpe:2.3:a:openldap:openldap:2.4.28
Openldap » Openldap » Version: 2.4.29

cpe:2.3:a:openldap:openldap:2.4.29
Openldap » Openldap » Version: 2.4.30

cpe:2.3:a:openldap:openldap:2.4.30
Openldap » Openldap » Version: 2.4.31

cpe:2.3:a:openldap:openldap:2.4.31
Openldap » Openldap » Version: 2.4.32

cpe:2.3:a:openldap:openldap:2.4.32
Openldap » Openldap » Version: 2.4.33

cpe:2.3:a:openldap:openldap:2.4.33
Openldap » Openldap » Version: 2.4.34

cpe:2.3:a:openldap:openldap:2.4.34
Openldap » Openldap » Version: 2.4.35

cpe:2.3:a:openldap:openldap:2.4.35
Openldap » Openldap » Version: 2.4.36

cpe:2.3:a:openldap:openldap:2.4.36
Openldap » Openldap » Version: 2.4.37

cpe:2.3:a:openldap:openldap:2.4.37
Openldap » Openldap » Version: 2.4.38

cpe:2.3:a:openldap:openldap:2.4.38
Openldap » Openldap » Version: 2.4.39

cpe:2.3:a:openldap:openldap:2.4.39
Openldap » Openldap » Version: 2.4.40

cpe:2.3:a:openldap:openldap:2.4.40
Openldap » Openldap » Version: 2.4.41

cpe:2.3:a:openldap:openldap:2.4.41
Openldap » Openldap » Version: 2.4.42

cpe:2.3:a:openldap:openldap:2.4.42
Openldap » Openldap » Version: 2.4.43

cpe:2.3:a:openldap:openldap:2.4.43
Openldap » Openldap » Version: 2.4.44

cpe:2.3:a:openldap:openldap:2.4.44
Openldap » Openldap » Version: 2.4.45

cpe:2.3:a:openldap:openldap:2.4.45
Openldap » Openldap » Version: 2.4.46

cpe:2.3:a:openldap:openldap:2.4.46
Openldap » Openldap » Version: 2.4.46-10.el8

cpe:2.3:a:openldap:openldap:2.4.46-10.el8
Openldap » Openldap » Version: 2.4.47

cpe:2.3:a:openldap:openldap:2.4.47
Openldap » Openldap » Version: 2.4.6

cpe:2.3:a:openldap:openldap:2.4.6
Openldap » Openldap » Version: 2.4.7

cpe:2.3:a:openldap:openldap:2.4.7
Openldap » Openldap » Version: 2.4.8

cpe:2.3:a:openldap:openldap:2.4.8
Openldap » Openldap » Version: 2.4.9

cpe:2.3:a:openldap:openldap:2.4.9
Oracle » Blockchain Platform » Version: N/A

cpe:2.3:a:oracle:blockchain_platform:-
Oracle » Zfs Storage Appliance Kit » Version: 8.8

cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8
Apple » Mac Os X » Version: 10.13

cpe:2.3:o:apple:mac_os_x:10.13
Apple » Mac Os X » Version: 10.13.0

cpe:2.3:o:apple:mac_os_x:10.13.0
Apple » Mac Os X » Version: 10.13.1

cpe:2.3:o:apple:mac_os_x:10.13.1
Apple » Mac Os X » Version: 10.13.2

cpe:2.3:o:apple:mac_os_x:10.13.2
Apple » Mac Os X » Version: 10.13.3

cpe:2.3:o:apple:mac_os_x:10.13.3
Apple » Mac Os X » Version: 10.13.4

cpe:2.3:o:apple:mac_os_x:10.13.4
Apple » Mac Os X » Version: 10.13.5

cpe:2.3:o:apple:mac_os_x:10.13.5
Apple » Mac Os X » Version: 10.13.6

cpe:2.3:o:apple:mac_os_x:10.13.6
Apple » Mac Os X » Version: 10.14

cpe:2.3:o:apple:mac_os_x:10.14
Apple » Mac Os X » Version: 10.14.0

cpe:2.3:o:apple:mac_os_x:10.14.0
Apple » Mac Os X » Version: 10.14.1

cpe:2.3:o:apple:mac_os_x:10.14.1
Apple » Mac Os X » Version: 10.14.2

cpe:2.3:o:apple:mac_os_x:10.14.2
Apple » Mac Os X » Version: 10.14.3

cpe:2.3:o:apple:mac_os_x:10.14.3
Apple » Mac Os X » Version: 10.14.4

cpe:2.3:o:apple:mac_os_x:10.14.4
Apple » Mac Os X » Version: 10.14.5

cpe:2.3:o:apple:mac_os_x:10.14.5
Apple » Mac Os X » Version: 10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6
Apple » Mac Os X » Version: 10.15

cpe:2.3:o:apple:mac_os_x:10.15
Apple » Mac Os X » Version: 10.15.1

cpe:2.3:o:apple:mac_os_x:10.15.1
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1
Oracle » Solaris » Version: 11

cpe:2.3:o:oracle:solaris:11

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13057

Products

Pricing

Contact Us