Vulnerability Bulletins |
DSA-4446 lemonldap-ng - security update |
|
| Affected software | Debian |
|
It was discovered that the Lemonldap::NG web SSO system performedinsufficient validation of session tokens if the tokenUseGlobalStorageoption is enabled, which could grant users with access to the mainsession database access to an anonymous session. More info: https://www.debian.org/security/2019/dsa-4446 |
|