In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libapache-session-ldap-perl | Jan 30, 2023 | Jan 27, 2023 |
| Ubuntu | — | Upgrade libapache-session-ldap-perl (Ubuntu Pro)Upgrade libapache-session-ldap-perl | Jan 25, 2024 | Jan 27, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub