Lucene search
MitreCVELIST:CVE-2020-36658HistoryJan 27, 2023 - 12:00 a.m.
CVE-2020-36658
2023-01-2700:00:00
mitre
www.cve.org
4
apache
session
ldap
x.509 certificate
validation
bypass
net::ldaps
perl
In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.
Related
nessus
nessus
Debian DLA-3284-1 : libapache-session-ldap-perl - LTS security update
2023-01-31 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : Apache::Session::LDAP vulnerability (USN-6596-1)
2024-01-24 00:00:00
Debian DLA-3287-1 : lemonldap-ng - LTS security update
2023-01-28 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3284-1)
2023-01-29 00:00:00
Ubuntu: Security Advisory (USN-6596-1)
2024-01-25 00:00:00
Debian: Security Advisory (DLA-3285-1)
2023-01-29 00:00:00
ubuntucve
ubuntucve
debian
debian
[SECURITY] [DLA 3284-1] libapache-session-ldap-perl security update
2023-01-28 12:07:29
[SECURITY] [DLA 3285-1] libapache-session-browseable-perl security update
2023-01-28 12:07:51
[SECURITY] [DLA 3287-1] lemonldap-ng security update
2023-01-28 15:38:58
cve
cve
debiancve
debiancve
osv
osv
CVE-2020-36658
2023-01-27 05:15:12
libapache-session-ldap-perl vulnerability
2024-01-24 11:12:41
libapache-session-ldap-perl - security update
2023-01-28 00:00:00
prion
prion
Design/Logic Flaw
2023-01-27 05:15:00
Design/Logic Flaw
2022-07-18 00:15:00
Design/Logic Flaw
2023-01-27 05:15:00
nvd
nvd
ubuntu
ubuntu
Apache::Session::LDAP vulnerability
2024-01-24 00:00:00
cvelist
cvelist
CVE-2020-16093
2022-07-17 00:00:00
CVE-2020-36659
2023-01-27 00:00:00
veracode
veracode
Improper Certificate Validation
2023-02-12 04:41:45