Debian/gosa: critical 9.8
Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring "success" when an arb
Action: Upgrade gosa to 2.7.4+reloaded3-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.4+reloaded3-9 | - |
Fixed versions
| 2.7.4+reloaded3-9 |
Sources
- osv: DEBIAN-CVE-2019-11187#Debian:13/gosa
- https://security-tracker.debian.org/tracker/CVE-2019-11187
published · modified · JSON