Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

A flaw was found in 389-ds-base. The LDBM backend attribute encryption implementation in ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c uses a hardcoded static initialization vector (IV) — 16 bytes of 0x61 — for all AES-CBC-PAD and 3DES-CBC-PAD encryption operations. CBC mode requires a unique, unpredictable IV per encryption operation to provide semantic security. The static IV causes identical plaintext attribute values to produce identical ciphertext, enabling an attacker with privileged read access to the LDBM database files to detect plaintext equality across entries by comparing ciphertext blocks and to facilitate offline cryptanalysis of encrypted attributes.