/ 
Lemonldap-NG-Manager-1.3.1
Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

Modules

Lemonldap::NG::Manager
Perl extension for managing Lemonldap::NG Web-SSO system.
Lemonldap::NG::Manager::Cli
Command Line Interface to edit LemonLDAP::NG configuration.
Lemonldap::NG::Manager::Notifications
Perl extension to manage Lemonldap::NG notifications
Lemonldap::NG::Manager::Sessions
Perl extension to manage Lemonldap::NG sessions

Provides

Lemonldap::NG::Manager::Downloader
in lib/Lemonldap/NG/Manager/Downloader.pm
Lemonldap::NG::Manager::Request
in lib/Lemonldap/NG/Manager/Request.pm
Lemonldap::NG::Manager::Uploader
in lib/Lemonldap/NG/Manager/Uploader.pm
Lemonldap::NG::Manager::_Struct
in lib/Lemonldap/NG/Manager/_Struct.pm
Lemonldap::NG::Manager::_i18n
in lib/Lemonldap/NG/Manager/_i18n.pm

Examples

Other files