Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

Modules

Perl extension for managing Lemonldap::NG Web-SSO system.
Static files generator of Lemonldap::NG Web-SSO system.
Command line manager for Lemonldap::NG web SSO system.
Perl extension for parsing new uploaded configurations.

Provides

in lib/Lemonldap/NG/Manager/2ndFA.pm
in lib/Lemonldap/NG/Manager/Api.pm
in lib/Lemonldap/NG/Manager/Api/2F.pm
in lib/Lemonldap/NG/Manager/Api/Common.pm
in lib/Lemonldap/NG/Manager/Api/Providers/OidcRp.pm
in lib/Lemonldap/NG/Manager/Api/Providers/SamlSp.pm
in lib/Lemonldap/NG/Manager/Api/2F.pm
in lib/Lemonldap/NG/Manager/Api/Common.pm
in lib/Lemonldap/NG/Manager/Api/Providers/OidcRp.pm
in lib/Lemonldap/NG/Manager/Api/Providers/SamlSp.pm
in lib/Lemonldap/NG/Manager/Attributes.pm
in lib/Lemonldap/NG/Manager/Build/Attributes.pm
in lib/Lemonldap/NG/Manager/Build/CTrees.pm
in lib/Lemonldap/NG/Manager/Build/PortalConstants.pm
in lib/Lemonldap/NG/Manager/Build/Tree.pm
in lib/Lemonldap/NG/Manager/Cli/Lib.pm
in lib/Lemonldap/NG/Manager/Cli.pm
in lib/Lemonldap/NG/Manager/Conf.pm
in lib/Lemonldap/NG/Manager/Conf/Diff.pm
in lib/Lemonldap/NG/Manager/Conf/Tests.pm
in lib/Lemonldap/NG/Manager/Conf/Zero.pm
in lib/Lemonldap/NG/Manager/Notifications.pm
in lib/Lemonldap/NG/Manager/Plugin.pm
in lib/Lemonldap/NG/Manager/Sessions.pm
in lib/Lemonldap/NG/Manager/Viewer.pm