CVE-2024-52946

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentic...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2024-52946 lemonldap-ng 修正版: 2.0.11+ds-4+deb11u6

参照URL

advisory github.com
advisory nvd.nist.gov
report gitlab.ow2.org
web lists.debian.org