CVE:CVE-2019-15941
CNNVD:CNNVD-201909-1182
LemonLDAP::NG是一套Web单点登录和访问管理软件。
LemonLDAP::NG 2.x版本至2.0.5版本中的OpenID Connect Issuer存在安全漏洞。攻击者可借助特制的OpenID Connect授权请求利用该漏洞绕过访问控制规则。
solution:Upgrade lemonldap-ng lemonldap to a higher version than :,and avoid the version :; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0