CVE-2015-3230

highpriority · track · 31EPSS 0.026 · 85 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.57% (85th) EPSS

CVSS 7.5 · high

Is it mine?

30 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · redhat_csaf

EPSS · scored 2026-10-27

389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixed389-ds-base-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-devel-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-devel-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-devel-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-devel-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-devel-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-libs-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-libs-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-libs-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-libs-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554
Fixed389-ds-base-libs-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2015:1554

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–7.5

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:P/A:P/E:Usecondary · CVSS-BT (t0sche)

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-254USprimaryCWE-358US

affected products (30)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
fedoraproject 389 directory server≤ 1.3.3.10nvdUScpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*
389-ds-base-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)all versionsfixedredhat_csafUS
389-ds-base-debuginfo-0:1.3.3.1-20.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)all versionsfixedredhat_csafUS

showing 20 of 30

advisories (1)

Vendor and ecosystem advisories describing this.

RHBA-2015:1554Red Hat Bug Fix Advisory: 389-ds-base bug fix update2015-08-05csaf · redhat_csafUS
Updated 389-ds-base packages that fix several bugs are now available for Red Hat Enterprise Linux 7.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

published 2015-10-29modified 2026-06-17

related (800)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2024-21351US	—OT critical	27.8% (98th)	KEV	2024-02-13
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	2023-11-14
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36584US	—OT critical	3.25% (88th)	KEV	2023-10-10
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2023-32049US	—OT critical	4.16% (91st)	KEV	2023-07-11
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-24880US	—OT critical	78.0% (100th)	KEV	2023-03-14
Windows SmartScreen Security Feature Bypass Vulnerability

+795 more

references (15)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan