Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-52946

Опубликовано: 18 нояб. 2024
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

EPSS

Процентиль: 40%
0.00487
Низкий

8.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 2 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

CVSS3: 8.8
debian
почти 2 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Ch ...

CVSS3: 8.8
github
почти 2 года назад

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

EPSS

Процентиль: 40%
0.00487
Низкий

8.8 High

CVSS3

Дефекты

CWE-276