/ 
Lemonldap-NG-Manager-1.9.15
Security Advisories (2)
CVE-2021-35472 (2021-07-30)

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

CVE-2021-35473

OAuth2 handler does not verify access token validity

Modules

Lemonldap::NG::Manager
Perl extension for managing Lemonldap::NG Web-SSO system.
Lemonldap::NG::Manager::Build
Static files generator of Lemonldap::NG Web-SSO system.
Lemonldap::NG::Manager::Cli
EXPERIMENTAL command line manager for Lemonldap::NG web SSO system.
Lemonldap::NG::Manager::Conf
Configuration management part of Lemonldap::NG::Manager.
Lemonldap::NG::Manager::Conf::Parser
Perl extension for parsing new uploaded configurations.
Lemonldap::NG::Manager::Notifications
Notifications explorer component of Lemonldap::NG::Manager.
Lemonldap::NG::Manager::Sessions
Sessions explorer component of Lemonldap::NG::Manager.

Provides

Lemonldap::NG::Manager::Attributes
in lib/Lemonldap/NG/Manager/Attributes.pm
Lemonldap::NG::Manager::Build::Attributes
in lib/Lemonldap/NG/Manager/Build/Attributes.pm
Lemonldap::NG::Manager::Build::CTrees
in lib/Lemonldap/NG/Manager/Build/CTrees.pm
Lemonldap::NG::Manager::Build::Tree
in lib/Lemonldap/NG/Manager/Build/Tree.pm
Lemonldap::NG::Manager::Cli::Lib
in lib/Lemonldap/NG/Manager/Cli/Lib.pm
Lemonldap::NG::Manager::Cli::Request
in lib/Lemonldap/NG/Manager/Cli.pm
Lemonldap::NG::Manager::Conf::Tests
in lib/Lemonldap/NG/Manager/Conf/Tests.pm
Lemonldap::NG::Manager::Conf::Zero
in lib/Lemonldap/NG/Manager/Conf/Zero.pm
Lemonldap::NG::Manager::Constants
in lib/Lemonldap/NG/Manager/Constants.pm
Lemonldap::NG::Manager::Lib
in lib/Lemonldap/NG/Manager/Lib.pm

Examples

Other files