Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Lemonldap-NG-Handler

cpan

The Apache protection module part of Lemonldap::NG Web-SSO system.

View on metacpan.org

Security Advisories for Lemonldap-NG-Handler in cpan

about 4 years ago

An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST password validation service (for another LemonLDAP::NG instance, for example) and using the Kerberos authentication method combined ... CPANSA-Lemonldap-NG-Handler-2021-40874-lemonldap

cpan Lemonldap-NG-Handler
about 4 years ago

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. CPANSA-Lemonldap-NG-Handler-2020-16093-lemonldap

cpan Lemonldap-NG-Handler
High
about 5 years ago

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two diffe... CPANSA-Lemonldap-NG-Handler-2021-35472-lemonldap

cpan Lemonldap-NG-Handler
Low
over 5 years ago

OAuth2 handler does not verify access token validity CPANSA-Lemonldap-NG-Handler-2021-35473-lemonldap

cpan Lemonldap-NG-Handler
Critical
almost 6 years ago

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG han... CPANSA-Lemonldap-NG-Handler-2020-24660-lemonldap

cpan Lemonldap-NG-Handler

Filter by Severity

Low 1 High 1 Critical 1