/ 
Lemonldap-NG-Manager-1.1.1
Security Advisories (2)
CVE-2021-35472 (2021-07-30)

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

CVE-2021-35473

OAuth2 handler does not verify access token validity

Modules

Lemonldap::NG::Manager
Perl extension for managing Lemonldap::NG Web-SSO system.
Lemonldap::NG::Manager::Notifications
Perl extension to manage Lemonldap::NG notifications
Lemonldap::NG::Manager::Sessions
Perl extension to manage Lemonldap::NG sessions

Provides

Lemonldap::NG::Manager::Downloader
in lib/Lemonldap/NG/Manager/Downloader.pm
Lemonldap::NG::Manager::Request
in lib/Lemonldap/NG/Manager/Request.pm
Lemonldap::NG::Manager::Uploader
in lib/Lemonldap/NG/Manager/Uploader.pm
Lemonldap::NG::Manager::_Struct
in lib/Lemonldap/NG/Manager/_Struct.pm
Lemonldap::NG::Manager::_i18n
in lib/Lemonldap/NG/Manager/_i18n.pm

Examples

Other files