SAML Signature Verification Flaw in LemonLDAP::NG Authentication System
CVE-2012-6426

Currently unrated

Key Information:

Vendor

Lemonldap-ng

Status
Lemonldap\
Vendor
CVE Published:
1 January 2013

What is CVE-2012-6426?

LemonLDAP::NG prior to version 1.2.3 is vulnerable due to its failure to utilize the signature-verification capabilities of the Lasso library. This oversight permits remote attackers to exploit crafted SAML data to circumvent access-control measures, potentially allowing unauthorized access to sensitive resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://jira.ow2.org/browse/LEMONLDAP-570
x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2012/12/19/6
mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2012/12/20/6
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.