CVE:CVE-2018-8764
CNNVD:CNNVD-201803-966
Roland Gruber Softwareentwicklung LDAP Account Manager是一款LDAP账户管理器，用于管理LDAP目录中的各类账户类型。
Roland Gruber Softwareentwicklung LDAP Account Manager 6.3之前版本中存在安全漏洞，该漏洞源于程序将跨站请求伪造令牌放在URI的‘sec_token’参数中。远程攻击者可利用该漏洞破坏跨站请求伪造保护机制。
solution:Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade ldap-account-manager ldap_account_manager to a higher version than 6.3,and avoid the version (,6.3)