CVE-2024-45160

creationtimestamp| type| source ---|---|--- 2024-10-09 08:07:11+00:00| seen| https://t.me/cvedetector/7427...

CVE-2024-45160

Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty clientpassword parameter client secret...

CVE-2024-45160

Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty clientpassword parameter client secret...

CVE-2024-45160

LemonLDAP::NG versions 2.18.x and 2.19.x before 2.19.2 are vulnerable to an incorrect credential validation flaw. An attacker can bypass OAuth2 client authentication by providing an empty client_password parameter (client secret). This vulnerability allows unauthorized access to OAuth2 resources....