CVE-2021-3652

CVE-2021-3652 describes a medium-severity authentication bypass vulnerability in 389-ds-base, affecting port389 389_ds_base. If an asterisk is imported as a password hash, it inadvertently allows any password to successfully authenticate, effectively disabling the intended security measure. This flaw enables an attacker to bypass authentication for users whose passwords should be inactive. The vulnerability has a CVSS score of 6.5, indicating a network-attackable, low-complexity exploit with potential for partial confidentiality and integrity impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.