CVE-2020-15719

—

CVSS 3.1

4.2 medium

EPSS

3%p84

Published

Jul 14, 2020 (Jul 14, 2020)

Modified

Jun 17, 2026

Description

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.

Vendors: openldap redhat opensuse mcafee oracle
Products: openldap, enterprise linux, leap, policy auditor, blockchain platform
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.