[{"CVE":"CVE-2020-12243","severity":"moderate","public_date":"2020-04-28T00:00:00Z","advisories":["RHSA-2020:4041"],"bugzilla":"1833535","bugzilla_description":"CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["openldap-0:2.4.44-22.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12243.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-15719","severity":"low","public_date":"2019-08-19T00:00:00Z","advisories":["RHBA-2019:3674","RHBA-2019:3303"],"bugzilla":"1853350","bugzilla_description":"CVE-2020-15719 openldap: Certificate validation incorrectly matches name against CN-ID","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":["openldap-0:2.4.46-10.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15719.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.2"},{"CVE":"CVE-2019-13057","severity":"moderate","public_date":"2019-07-25T00:00:00Z","advisories":[],"bugzilla":"1730472","bugzilla_description":"CVE-2019-13057 openldap: Information disclosure issue in slapd component","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13057.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-13565","severity":"moderate","public_date":"2019-07-24T00:00:00Z","advisories":[],"bugzilla":"1730477","bugzilla_description":"CVE-2019-13565 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-284","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13565.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.4"},{"CVE":"CVE-2017-17740","severity":"moderate","public_date":"2017-10-20T00:00:00Z","advisories":[],"bugzilla":"1527076","bugzilla_description":"CVE-2017-17740 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-628","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17740.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2017-14159","severity":"low","public_date":"2017-07-28T00:00:00Z","advisories":[],"bugzilla":"1488751","bugzilla_description":"CVE-2017-14159 openldap: Privilege escalation via PID file manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14159.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cvss3_score":"4.4"}]