Beveiligingsadvies

CVE-2020-36658

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-01-27 00:00:00
Laatst bijgewerkt 2025-03-28 17:37:05
Toegewezen door mitre
CVSS-score 8.1
Status PUBLISHED

Beschrijving

In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.