Known Vulnerabilities for products from Lemonldap-ng

Listed below are 6 of the newest known vulnerabilities associated with the vendor "Lemonldap-ng".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-35472 An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing... 8.8 - HIGH 2021-07-30 2021-08-11
CVE-2020-24660 An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control t... 9.8 - CRITICAL 2020-09-14 2020-09-18
CVE-2019-15941 OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted O... 9.8 - CRITICAL 2019-09-25 2020-08-18
CVE-2019-13031 LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server.... 8.1 - HIGH 2019-06-28 2019-08-26
CVE-2019-12046 LemonLDAP::NG -2.0.3 has Incorrect Access Control. 9.8 - CRITICAL 2019-05-22 2020-08-24
CVE-2012-6426 LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attac... 7.5 - HIGH 2013-01-01 2013-01-07

Known software with vulnerabilities from Lemonldap-ng

Type Vendor Product Version
ApplicationLemonldap-ngLemonldap\

Popular searches for "Lemonldap-ng"

LemonLDAP::NG - Web Single Sign On and Access Management Free Software

lemonldap-ng.org

J FLemonLDAP::NG - Web Single Sign On and Access Management Free Software LemonLDAP::NG is a free software to provide WebSSO, Access Management and Identity Federation

lemonldap-ng.org/welcome lemonldap-ng.org/start lemonldap-ng.org/welcome lemonldap.ow2.org Free software Single sign-on World Wide Web Access management OpenID Connect Security Assertion Markup Language Federated identity Authentication User (computing) Twitter Facebook Representational state transfer WebID Authorization LinkedIn Attribute (computing) Login Kerberos (protocol) Active Directory Lightweight Directory Access Protocol

LemonLDAP::NG - Web Single Sign On and Access Management Free Software

www.lemonldap-ng.org/start

J FLemonLDAP::NG - Web Single Sign On and Access Management Free Software LemonLDAP::NG is a free software to provide WebSSO, Access Management and Identity Federation

www.lemonldap-ng.org Free software Single sign-on World Wide Web Access management OpenID Connect Security Assertion Markup Language Federated identity Authentication User (computing) Twitter Facebook Representational state transfer WebID Authorization LinkedIn Attribute (computing) Login Kerberos (protocol) Active Directory Lightweight Directory Access Protocol