Debian Libapache-Session-Ldap-Perl vulnerabilities

1 known vulnerability affecting debian/libapache-session-ldap-perl.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-36658HIGHCVSS 7.5fixed in libapache-session-ldap-perl 0.5-1 (bookworm)2020

CVE-2020-36658 [HIGH] CVE-2020-36658: libapache-session-ldap-perl - In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not ch... In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix. Scope: local bookworm: resolved (fixed in 0.5-1) bu