CVE-2021-40874

The vulnerability CVE-2021-40874 affects LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug‑in to run a REST password validation service (e.g., for another LemonLDAP::NG instance) and combining Kerberos authentication with another method via the Combination authentication plu...

LemonLDAP::NG 授权问题漏洞

LemonLDAP::NG is a web single sign-on and access management software. A security vulnerability exists in LemonLDAP::NG version 2.0.13, which stems from the fact that when using the RESTServer plug-in to operate the REST password authentication service, and using the Kerberos authentication method...

CVE-2020-16093

CVE-2020-16093 affects LemonLDAP::NG prior to 2.0.9 where X.509 certificate validation is not performed by default when connecting to remote LDAP backends due to Net::LDAPS Perl config. The Debian LTS advisory DLA-3287-1 fixes this for Debian 10 by upgrading lemonldap-ng to 2.0.2+ds-7+deb10u8 (an...

CVE-2020-16093

In LemonLDAP::NG aka lemonldap-ng through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used...

PT-2022-11318 · Unknown · Lemonldap::Ng

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG version 2.0.13 Description: An issue was discovered in LemonLDAP::NG when using the RESTServer plug-in for a REST password validation service and the Kerberos authentication method combined with another method using the...

PT-2022-8581 · Unknown · Net::Ldaps +1

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.0.9 Description: The issue concerns the validity of X.509 certificates not being checked by default when connecting to remote LDAP backends. This is due to the default configuration of the Net::LDAPS module f...

LemonLDAP::NG 信任管理问题漏洞

LemonLDAP::NG is a web single sign-on and access management software. A security vulnerability exists in LemonLDAP::NG version 2.0.8, which stems from a default failure to check the validity of X.509 certificates when connecting to a remote LDAP backend, due to the use of the default configuratio...

CVE-2020-16093

In LemonLDAP::NG aka lemonldap-ng through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used...

Access-Control Bypass

lemonldap is vulnerable to access control bypass. The vulnerability exists due to the RESTServer pwdConfirm always returns true with Combination + Kerberos...

The vulnerability of the authentication system for web applications, LemonLDAP::NG, related to an error in processing authentication keys, allows attackers to perform spear-phishing attacks.

The vulnerability of the authentication system for web applications related to the error in processing authentication keys controlled by users. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...

CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

DEBIAN-CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

UBUNTU-CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

Authorization

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...

CVE-2021-35472

CVE-2021-35472 affects LemonLDAP::NG prior to 2.0.12. The issue is a session cache corruption vulnerability that can lead to authorization bypass or spoofing. By issuing a loop of many authentication attempts, an attacker might end up authenticated as one of two different users, enabling potentia...

CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users...