11512 matches found
Design/Logic Flaw
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
UBUNTU-CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
CVE-2022-4254
CVE-2022-4254 concerns sssd’s libsss_certmap, where certificate data used in LDAP filters is not sanitized, enabling LDAP filter injection. Public disclosures and advisories (e.g., Debian DLA 3436-1/3436-2, ALAS2-2023-1995, ALAS-2023-1723) indicate the issue can lead to privilege escalation or ad...
Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2023-95d98f89a8)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
CVE-2022-4254
sssd: libssscertmap fails to sanitise certificate data used in LDAP filters...
[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-10.fc37
This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...
Debian dla-3285 : libapache-session-browseable-perl - security update
The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3285 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3285-1 [email protected]...
Debian dla-3284 : libapache-session-ldap-perl - security update
The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3284 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3284-1 [email protected]...
Dell EMC SCG Policy Manager Trust Management Issue Vulnerability
Dell EMC SCG Policy Manager is a secure connectivity gateway policy manager from Dell, U.S. A vulnerability exists in Dell EMC SCG Policy Manager that uses hard-coded encryption keys, which can be exploited by remote attackers to submit special requests that can gain LDAP user privileges...
Debian: Security Advisory (DLA-3284-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3287-1] lemonldap-ng security update
Debian LTS Advisory DLA-3287-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 28, 2023 https://wiki.debian.org/LTS Package : lemonldap-ng Version : 2.0.2+ds-7+deb10u8 CVE ID : CVE-2020-16093 CVE-2022-37186 Two vulnerabilities were found in lemonldap-ng, an...
[SECURITY] [DLA 3285-1] libapache-session-browseable-perl security update
Debian LTS Advisory DLA-3285-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 28, 2023 https://wiki.debian.org/LTS Package : libapache-session-browseable-perl Version : 1.3.0-1+deb10u1 CVE ID : CVE-2020-36659 In Apache::Session::Browseable before 1.3.6,...
[SECURITY] [DLA 3284-1] libapache-session-ldap-perl security update
Debian LTS Advisory DLA-3284-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 28, 2023 https://wiki.debian.org/LTS Package : libapache-session-ldap-perl Version : 0.4-1+deb10u1 CVE ID : CVE-2020-36658 In Apache::Session::LDAP before 0.5, validity of the...
SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2023:0204-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0204-1 advisory. - CVE-2022-4254: Fixed a bug in libssscertmap which could allow an attacker to gain control of the admin account and perform a full domain...
Debian dla-3287 : lemonldap-ng - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3287 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3287-1 [email protected]...