CVE-2021-35472

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

Se ha detectado un problema en LemonLDAP::NG versiones anteriores a 2.0.12. La corrupción de la caché de la sesión puede conllevar a una omisión de la autorización o una suplantación de identidad. Al ejecutar un bucle que hace muchos intentos de autenticación, un atacante podría ser autenticado alternativamente como uno de dos usuarios diferentes