CVE-2021-35472 – An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead …

Vuln ID: CVE-2021-35472

Published:  2021-07-30  14:15:17Z

Description: An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):