/ 
Lemonldap-NG-Portal-1.1.0
/ Lemonldap::NG::Portal::IssuerDBSAML
Security Advisories (2)
CVE-2021-35472 (2021-07-30)

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

CVE-2021-35473

OAuth2 handler does not verify access token validity

NAME

Lemonldap::NG::Portal::IssuerDBSAML - SAML IssuerDB for LemonLDAP::NG

SYNOPSIS

use Lemonldap::NG::Portal::SharedConf;

my $portal = Lemonldap::NG::Portal::SharedConf->new({
    issuerDB => SAML,
});

DESCRIPTION

SAML IssuerDB for LemonLDAP::NG

SEE ALSO

Lemonldap::NG::Portal

AUTHOR

Clément Oudot, <coudot@linagora.com>

COPYRIGHT AND LICENSE

Copyright (C) 2009, 2010 by Clément Oudot

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.10.0 or, at your option, any later version of Perl 5 you may have available.