How severe is CVE-2020-35518?

CVE-2020-35518 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2020-35518 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2020-35518?

CVE-2020-35518 primarily affects Redhat 389 Directory Server. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2020-35518?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2020-35518 published?

CVE-2020-35518 was published on 2021-03-26 and last updated on 2026-06-17.

CVE-2020-35518

CVE-2020-35518 is a medium-severity vulnerability in Redhat 389 Directory Server with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-203.

Key facts

Severity: Medium (CVSS 3.x base score 5.3)
CVSS v2: 5.0
EPSS exploit prediction: 2% (72nd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-203
Affected product: Redhat 389 Directory Server
Published: 2021-03-26
Last modified: 2026-06-17

Description

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

Frequently asked questions

What is CVE-2020-35518?: When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
How severe is CVE-2020-35518?: CVE-2020-35518 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2020-35518 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2020-35518?: CVE-2020-35518 primarily affects Redhat 389 Directory Server. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2020-35518?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2020-35518 published?: CVE-2020-35518 was published on 2021-03-26 and last updated on 2026-06-17.

References

Affected products (4)

cpe:2.3:o:redhat:389_directory_server:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:directory_server:11.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

More vulnerabilities in Redhat 389 Directory Server

CVE-2026-9064 — High (CVSS 7.5): A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an…
CVE-2022-1949 — High (CVSS 7.5): An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect…
CVE-2010-2222 — High (CVSS 7.5): The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a…
CVE-2026-11611 — Medium (CVSS 6.5): A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory…
CVE-2024-6237 — Medium (CVSS 6.5): A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server…
CVE-2022-0996 — Medium (CVSS 6.5): A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause…

All CVEs affecting Redhat 389 Directory Server →

Other CWE-203 (Observable Discrepancy) vulnerabilities

CVE-2019-25337 — Critical (CVSS 9.8): OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by…
CVE-2026-23519 — Critical (CVSS 9.8): RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in…
CVE-2025-27667 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative…
CVE-2024-25714 — Critical (CVSS 9.8): In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel…
CVE-2024-25191 — Critical (CVSS 9.8): php-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass…
CVE-2024-25190 — Critical (CVSS 9.8): l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass…

Browse all CWE-203 (Observable Discrepancy) vulnerabilities →