CVE-2017-15135

CVE-2017-15135 is a high-severity authentication bypass vulnerability affecting 389-ds-base versions from 1.3.6.1 up to and including 1.4.0.3, specifically within the fedoraproject 389_directory_server. This flaw stems from incorrect handling of internal hash comparison operations during authentication. A remote, unauthenticated attacker could exploit this under very rare and specific circumstances to bypass the authentication process, potentially leading to high impact on confidentiality, integrity, and availability. Despite its high CVSS score of 8.1, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.