tocsin

Debian/lemonldap-ng: high 8.8

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker mi

Action: Upgrade lemonldap-ng to 2.0.11+ds-4 or later.

Affected

introducedfixedlast affected
02.0.11+ds-4-

Fixed versions

2.0.11+ds-4

Sources

published · modified · JSON