/ 
Lemonldap-NG-Handler-2.0.13
River stage one • 2 direct dependents • 2 total dependents
Security Advisories (1)
CVE-2021-40874 (2022-07-18)

An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST password validation service (for another LemonLDAP::NG instance, for example) and using the Kerberos authentication method combined with another method with the Combination authentication plug-in, any password will be recognized as valid for an existing user.

Modules

Lemonldap::NG::Handler
The Apache protection module part of Lemonldap::NG Web-SSO system.
Lemonldap::NG::Handler::ApacheMP2::FCGIClient
Apache client for Lemonldap::NG FastCGI server.
Lemonldap::NG::Handler::PSGI
Base library for protected PSGI applications.
Lemonldap::NG::Handler::PSGI::Router
Base library for protected REST APIs of Lemonldap::NG.
Lemonldap::NG::Handler::PSGI::Try
Special handler for Lemonldap::NG Portal
Plack::Middleware::Auth::LemonldapNG
authentication middleware for Lemonldap-NG

Provides

Lemonldap::NG::Handler::ApacheMP2
in lib/Lemonldap/NG/Handler/ApacheMP2.pm
Lemonldap::NG::Handler::ApacheMP2::AuthBasic
in lib/Lemonldap/NG/Handler/ApacheMP2/AuthBasic.pm
Lemonldap::NG::Handler::ApacheMP2::CDA
in lib/Lemonldap/NG/Handler/ApacheMP2/CDA.pm
Lemonldap::NG::Handler::ApacheMP2::DevOps
in lib/Lemonldap/NG/Handler/ApacheMP2/DevOps.pm
Lemonldap::NG::Handler::ApacheMP2::DevOpsST
in lib/Lemonldap/NG/Handler/ApacheMP2/DevOpsST.pm
Lemonldap::NG::Handler::ApacheMP2::Fail
in lib/Lemonldap/NG/Handler/ApacheMP2/Fail.pm
Lemonldap::NG::Handler::ApacheMP2::Main
in lib/Lemonldap/NG/Handler/ApacheMP2/Main.pm
Lemonldap::NG::Handler::ApacheMP2::Menu
in lib/Lemonldap/NG/Handler/ApacheMP2/Menu.pm
Lemonldap::NG::Handler::ApacheMP2::OAuth2
in lib/Lemonldap/NG/Handler/ApacheMP2/OAuth2.pm
Lemonldap::NG::Handler::ApacheMP2::Request
in lib/Lemonldap/NG/Handler/ApacheMP2/Request.pm
Lemonldap::NG::Handler::ApacheMP2::SecureToken
in lib/Lemonldap/NG/Handler/ApacheMP2/SecureToken.pm
Lemonldap::NG::Handler::ApacheMP2::ServiceToken
in lib/Lemonldap/NG/Handler/ApacheMP2/ServiceToken.pm
Lemonldap::NG::Handler::ApacheMP2::ZimbraPreAuth
in lib/Lemonldap/NG/Handler/ApacheMP2/ZimbraPreAuth.pm
Lemonldap::NG::Handler::Lib::AuthBasic
in lib/Lemonldap/NG/Handler/Lib/AuthBasic.pm
Lemonldap::NG::Handler::Lib::CDA
in lib/Lemonldap/NG/Handler/Lib/CDA.pm
Lemonldap::NG::Handler::Lib::DevOps
in lib/Lemonldap/NG/Handler/Lib/DevOps.pm
Lemonldap::NG::Handler::Lib::Fail
in lib/Lemonldap/NG/Handler/Lib/Fail.pm
Lemonldap::NG::Handler::Lib::OAuth2
in lib/Lemonldap/NG/Handler/Lib/OAuth2.pm
Lemonldap::NG::Handler::Lib::PSGI
in lib/Lemonldap/NG/Handler/Lib/PSGI.pm
Lemonldap::NG::Handler::Lib::SecureToken
in lib/Lemonldap/NG/Handler/Lib/SecureToken.pm
Lemonldap::NG::Handler::Lib::ServiceToken
in lib/Lemonldap/NG/Handler/Lib/ServiceToken.pm
Lemonldap::NG::Handler::Lib::Status
in lib/Lemonldap/NG/Handler/Lib/Status.pm
Lemonldap::NG::Handler::Lib::StatusConstants
in lib/Lemonldap/NG/Handler/Lib/StatusConstants.pm
Lemonldap::NG::Handler::Lib::ZimbraPreAuth
in lib/Lemonldap/NG/Handler/Lib/ZimbraPreAuth.pm
Lemonldap::NG::Handler::Main
in lib/Lemonldap/NG/Handler/Main.pm
Lemonldap::NG::Handler::Main
in lib/Lemonldap/NG/Handler/Main/Init.pm
Lemonldap::NG::Handler::Main
in lib/Lemonldap/NG/Handler/Main/Reload.pm
Lemonldap::NG::Handler::Main
in lib/Lemonldap/NG/Handler/Main/Run.pm
Lemonldap::NG::Handler::Main
in lib/Lemonldap/NG/Handler/Main/SharedVariables.pm
Lemonldap::NG::Handler::Main::Init
in lib/Lemonldap/NG/Handler/Main/Init.pm
Lemonldap::NG::Handler::Main::Jail
in lib/Lemonldap/NG/Handler/Main/Jail.pm
Lemonldap::NG::Handler::Main::Reload
in lib/Lemonldap/NG/Handler/Main/Reload.pm
Lemonldap::NG::Handler::Main::Run
in lib/Lemonldap/NG/Handler/Main/Run.pm
Lemonldap::NG::Handler::Main::SharedVariables
in lib/Lemonldap/NG/Handler/Main/SharedVariables.pm
Lemonldap::NG::Handler::PSGI::AuthBasic
in lib/Lemonldap/NG/Handler/PSGI/AuthBasic.pm
Lemonldap::NG::Handler::PSGI::CDA
in lib/Lemonldap/NG/Handler/PSGI/CDA.pm
Lemonldap::NG::Handler::PSGI::Fail
in lib/Lemonldap/NG/Handler/PSGI/Fail.pm
Lemonldap::NG::Handler::PSGI::Main
in lib/Lemonldap/NG/Handler/PSGI/Main.pm
Lemonldap::NG::Handler::PSGI::OAuth2
in lib/Lemonldap/NG/Handler/PSGI/OAuth2.pm
Lemonldap::NG::Handler::PSGI::ServiceToken
in lib/Lemonldap/NG/Handler/PSGI/ServiceToken.pm
Lemonldap::NG::Handler::Server
in lib/Lemonldap/NG/Handler/Server.pm
Lemonldap::NG::Handler::Server::AuthBasic
in lib/Lemonldap/NG/Handler/Server/AuthBasic.pm
Lemonldap::NG::Handler::Server::CDA
in lib/Lemonldap/NG/Handler/Server/CDA.pm
Lemonldap::NG::Handler::Server::DevOps
in lib/Lemonldap/NG/Handler/Server/DevOps.pm
Lemonldap::NG::Handler::Server::DevOpsST
in lib/Lemonldap/NG/Handler/Server/DevOpsST.pm
Lemonldap::NG::Handler::Server::Fail
in lib/Lemonldap/NG/Handler/Server/Fail.pm
Lemonldap::NG::Handler::Server::Main
in lib/Lemonldap/NG/Handler/Server/Main.pm
Lemonldap::NG::Handler::Server::Nginx
in lib/Lemonldap/NG/Handler/Server/Nginx.pm
Lemonldap::NG::Handler::Server::OAuth2
in lib/Lemonldap/NG/Handler/Server/OAuth2.pm
Lemonldap::NG::Handler::Server::SecureToken
in lib/Lemonldap/NG/Handler/Server/SecureToken.pm
Lemonldap::NG::Handler::Server::ServiceToken
in lib/Lemonldap/NG/Handler/Server/ServiceToken.pm
Lemonldap::NG::Handler::Server::ZimbraPreAuth
in lib/Lemonldap/NG/Handler/Server/ZimbraPreAuth.pm

Examples

Other files