CVE-2019-12046

概要

参考情報

• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/commits/master · Third Party Advisory
• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1742 · Exploit
• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1743 · Third Party Advisory
• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1744 · Third Party Advisory
• lemonldap-ng.org/download · Product
• projects.ow2.org/view/lemonldap-ng/lemonldap-ng-1-9-19-is-out · Release Notes
• projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-0-4-is-out · Release Notes
• seclists.org/bugtraq/2019/May/38 · Mailing List

lemonldap のその他の脆弱性

• CVE-2024-48933中 6.1A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML int…
• CVE-2023-44469中 4.3A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to sen…
• CVE-2019-19791緊急 9.8In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/RES…
• CVE-2022-37186中 5.9In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting.…
• CVE-2023-28862緊急 9.8An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling d…