CVE:CVE-2020-15719
CNNVD:CNNVD-202007-832
OpenLDAP是美国OpenLDAP（Openldap）基金会的一个轻型目录访问协议（LDAP）的开源实现。
OpenLDAP libldap中存在信任管理问题漏洞，该漏洞源于程序存在证书验证缺陷。攻击者可利用该漏洞发起中间人攻击，并获得端点之间通信通道的访问权限，进而获取敏感信息或进一步入侵系统。
solution:Upgrade openldap openldap to a higher version than 2.4.46-10.el8,and avoid the version (,2.4.46-10.el8); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade mcafee policy_auditor to a higher version than 6.5.1,and avoid the version (,6.5.1); Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2)