Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3r2v-8348-hx3r

Опубликовано: 18 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

EPSS

Процентиль: 27%
0.00098
Низкий

8.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 1 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

CVSS3: 8.8
nvd
около 1 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

CVSS3: 8.8
debian
около 1 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Ch ...

EPSS

Процентиль: 27%
0.00098
Низкий

8.8 High

CVSS3

Дефекты

CWE-276