PT-2023-11827 · Unknown · Net::Ldaps+1
CVE-2020-36659
·
Publicado
2023-01-27
·
Atualizado
2025-04-03
CVSS v3.1
8.1
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apache::Session::Browseable versions prior to 1.3.6
Description
The issue concerns the validity check of the X.509 certificate when connecting to remote LDAP backends. By default, the validity of the X.509 certificate is not checked due to the default configuration of the Net::LDAPS module for Perl.
Recommendations
For versions prior to 1.3.6, update to version 1.3.6 or later to resolve the issue.
Correção
Improper Certificate Validation
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache::Session::Browseable
Net::Ldaps