https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T15:15:07.763874+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-36658 CVE-2020-36658 2026-10-01T15:15:08.301132+00:00

In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.

 https://vulnerability.circl.lu/vuln/usn-6596-1 USN-6596-1 — libapache-session-ldap-perl vulnerability 2026-10-01T15:15:08.301282+00:00

Affected: Ubuntu:Pro:16.04:LTS: libapache-session-ldap-perl, Ubuntu:Pro:18.04:LTS: libapache-session-ldap-perl, Ubuntu:20.04:LTS: libapache-session-ldap-perl

It was discovered that Apache::Session::LDAP incorrectly handled invalid X.509 certificates. If a user or an automated system were tricked into opening a specially crafted invalid X.509 certificate, a remote attacker could possibly use this issue to perform spoofing and obtain sensitive information.