https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:15:05 +0000 https://vulnerability.circl.lu/vuln/cve-2020-36658 <p>In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.</p> <p>In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.</p> https://vulnerability.circl.lu/vuln/cve-2020-36658 https://vulnerability.circl.lu/vuln/usn-6596-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libapache-session-ldap-perl, Ubuntu:Pro:18.04:LTS: libapache-session-ldap-perl, Ubuntu:20.04:LTS: libapache-session-ldap-perl</p> <p>It was discovered that Apache::Session::LDAP incorrectly handled invalid X.509 certificates. If a user or an automated system were tricked into opening a specially crafted invalid X.509 certificate, a remote attacker could possibly use this issue to perform spoofing and obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libapache-session-ldap-perl, Ubuntu:Pro:18.04:LTS: libapache-session-ldap-perl, Ubuntu:20.04:LTS: libapache-session-ldap-perl</p> <p>It was discovered that Apache::Session::LDAP incorrectly handled invalid X.509 certificates. If a user or an automated system were tricked into opening a specially crafted invalid X.509 certificate, a remote attacker could possibly use this issue to perform spoofing and obtain sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-6596-1