CVE-2024-48933

概要

参考情報

• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3232 · Issue Tracking
• lists.debian.org/debian-lts-announce/2024/11/msg00037.html

lemonldap のその他の脆弱性

• CVE-2023-44469中 4.3A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to sen…
• CVE-2019-19791緊急 9.8In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/RES…
• CVE-2022-37186中 5.9In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting.…
• CVE-2023-28862緊急 9.8An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling d…
• CVE-2021-40874緊急 9.8An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST password validation …