Security Advisory

CVE-2019-19791

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-05-29 00:00:00

Last updated 2025-01-14 17:56:24

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/REST endpoints (when some LemonLDAP::NG setup options are used). For example, an attacker can insert index.fcgi/index.fcgi into a URL to bypass a Require directive.

← Browse all CVEs View on cve.org ↗