Lucene search

K
cvelistMitreCVELIST:CVE-2020-36659
HistoryJan 27, 2023 - 12:00 a.m.

CVE-2020-36659

2023-01-2700:00:00
mitre
www.cve.org
apache
session
browseable
x.509
certificate
validation
ldap
net::ldaps
perl
cve-2020-36659
cve-2020-16093

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%