Threats tagged 'ghsa-2crm-65qv-hx46'

A vulnerability in 389 Directory Server allows unauthenticated remote attackers to invoke certain replication-maintenance operations without authorization when anonymous access is enabled by default. Authenticated low-privilege users can also invoke these operations regardless of privilege. This flaw can lead to removal of replica IDs from replication metadata, purging of changelog records, and interruption of administrator-initiated cleanup, potentially causing replication inconsistencies or unavailability.