Cloudanix VulnDB

CVE-2026-14969

Medium · 4.4

CVSS

4.4

EPSS

—

Published

Jul 7, 2026

CISA due date

—

The record

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities