| Package | Affected versions | Patched versions |
|---|---|---|
| lemonldap | < 2.0.15 | 2.0.15 |
In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free