/ 
Lemonldap-NG-Common-1.3.0_01 UNAUTHORIZED RELEASE
Security Advisories (2)
CVE-2021-35472 (2021-07-30)

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

CVE-2021-35473

OAuth2 handler does not verify access token validity

Modules

Lemonldap::NG::Common
Common files for Lemonldap::NG infrastructure
Lemonldap::NG::Common::Apache::Session::SOAP
Perl extension written to access to Lemonldap::NG Web-SSO sessions via SOAP.
Lemonldap::NG::Common::CGI
Simple module to extend CGI to manage HTTP "If-Modified-Since / 304 Not Modified" system.
Lemonldap::NG::Common::CGI::SOAPServer
Extends SOAP::Lite to be compatible with CGI.
Lemonldap::NG::Common::CGI::SOAPService
Wrapper for all SOAP functions of Lemonldap::NG CGIs.
Lemonldap::NG::Common::Conf
Perl extension written to manage Lemonldap::NG Web-SSO configuration.
Lemonldap::NG::Common::Conf::SOAP
Perl extension written to access to Lemonldap::NG Web-SSO configuration via SOAP.
Lemonldap::NG::Common::Notification
Provides notification messages system. UNAUTHORIZED
Lemonldap::NG::Common::Safelib
Contains functions that are automatically imported in Lemonldap::NG Safe objects to be used in expressions like rules, macros,...

Provides

Lemonldap::NG::Common::Apache::Session
in lib/Lemonldap/NG/Common/Apache/Session.pm
Lemonldap::NG::Common::Conf::CDBI
in lib/Lemonldap/NG/Common/Conf/CDBI.pm
Lemonldap::NG::Common::Conf::Constants
in lib/Lemonldap/NG/Common/Conf/Constants.pm
Lemonldap::NG::Common::Conf::DBI
in lib/Lemonldap/NG/Common/Conf/DBI.pm
Lemonldap::NG::Common::Conf::File
in lib/Lemonldap/NG/Common/Conf/File.pm
Lemonldap::NG::Common::Conf::JSONFile
in lib/Lemonldap/NG/Common/Conf/JSONFile.pm UNAUTHORIZED
Lemonldap::NG::Common::Conf::LDAP
in lib/Lemonldap/NG/Common/Conf/LDAP.pm
Lemonldap::NG::Common::Conf::RDBI
in lib/Lemonldap/NG/Common/Conf/RDBI.pm
Lemonldap::NG::Common::Conf::SAML::Metadata
in lib/Lemonldap/NG/Common/Conf/SAML/Metadata.pm
Lemonldap::NG::Common::Conf::Serializer
in lib/Lemonldap/NG/Common/Conf/Serializer.pm
Lemonldap::NG::Common::Conf::_DBI
in lib/Lemonldap/NG/Common/Conf/_DBI.pm
Lemonldap::NG::Common::Crypto
in lib/Lemonldap/NG/Common/Crypto.pm
Lemonldap::NG::Common::Notification::DBI
in lib/Lemonldap/NG/Common/Notification/DBI.pm UNAUTHORIZED
Lemonldap::NG::Common::Notification::File
in lib/Lemonldap/NG/Common/Notification/File.pm UNAUTHORIZED
Lemonldap::NG::Common::Notification::LDAP
in lib/Lemonldap/NG/Common/Notification/LDAP.pm UNAUTHORIZED
Lemonldap::NG::Common::Regexp
in lib/Lemonldap/NG/Common/Regexp.pm
Lemonldap::NG::Common::Safe
in lib/Lemonldap/NG/Common/Safe.pm

Other files