CVE-2020-16093

Опубликовано: 18 июл. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

Ссылки

https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2250
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lemonldap-ng.org/download
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00027.html
Mailing List
Third Party Advisory
https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2250
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lemonldap-ng.org/download
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00027.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lemonldap-ng:lemonldap\:\:ng:*:*:*:*:*:*:*:*

Версия до 2.0.8 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00956

Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVE-2020-16093

CVSS3: 7.5

ubuntu

больше 3 лет назад

CVE-2020-16093

CVSS3: 7.5

debian

больше 3 лет назад

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.5 ...

GHSA-9c48-27fx-7952

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 76%

0.00956

Низкий

7.5 High

CVSS3

Дефекты

CWE-295