| Package | Affected versions | Patched versions |
|---|---|---|
| apache | < 0.5 | 0.5 |
In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free