Security Advisories (1)
CPANSA-Catalyst-Authentication-Store-LDAP-2012-01 (2012-12-11)

Incorrect password check binds to the unauthenticated user.

Changes for version 1.009

  • Fix pod for get_user() and from_session() in Backend.pm, adding the missing $c param. Pass $c in from_session() through to get_user(). Reported in https://rt.cpan.org/Ticket/Display.html?id=56983 with patch from Bjørn-Olav Strand.