CVE-2024-52946

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentic...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-52946 lemonldap-ng Corrigé dans: 2.0.11+ds-4+deb11u6

Références

advisory github.com
advisory nvd.nist.gov
report gitlab.ow2.org
web lists.debian.org