Linux Distros Unpatched Vulnerability : CVE-2020-24660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL- based access control to protected Virtual Hosts by...

Authorization Bypass

lemonldap-ng-handler is vulnerable to authorization bypass. The bypass is possible due to the lack of correct enforcement of regexp-based URL access rules, allowing an attacker to bypass the filtering system using certain URL encodings...