SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

DSA-4533-1 lemonldap-ng -- lemonldap-ng

ID: oval:org.secpod.oval:def:604542	Date: (C)2019-10-01 (M)2021-09-11
Class: PATCH	Family: unix

It was discovered that the Lemonldap::NG web SSO system did not restrict OIDC authorization codes to the relying party.

Platform:

Debian 10.x

Product:

liblemonldap-ng-handler-perl

liblemonldap-ng-manager-perl

lemonldap-ng

liblemonldap-ng-portal-perl

liblemonldap-ng-common-perl

Reference:

DSA-4533-1