CVE-2012-6426

LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended…

published January 1, 2013

CVSS
—
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01552 · 74.8th percentile
Published
2013-01-01T15:00Z
EPSS history
Timeline
  • 01 JAN 15:00Z
    LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended…
    cvelistv5