Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3r2v-8348-hx3r

Опубликовано: 18 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

EPSS

Процентиль: 40%
0.00487
Низкий

8.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 2 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

CVSS3: 8.8
nvd
почти 2 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

CVSS3: 8.8
debian
почти 2 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Ch ...

EPSS

Процентиль: 40%
0.00487
Низкий

8.8 High

CVSS3

Дефекты

CWE-276