CVE-2020-36658

Published January 27th, 2023

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.

LemonLDAPNG/Apache-Session-LDAP

Apache::Session::LDAP Perl module - Store Apache Session in LDAP

GitHub