Beveiligingsadvies

CVE-2023-28862

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-03-31 00:00:00

Laatst bijgewerkt 2025-02-14 19:33:52

Toegewezen door mitre

CVSS-score 9.8

Status PUBLISHED

Beschrijving

An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling during a password check allow attackers to bypass 2FA verification. Any plugin that tries to deny session creation after the store step does not deny an AuthBasic session.

← Alle CVE's bekijken Bekijk op cve.org ↗