Vulnerabilities > CVE-2021-35472 - Improper Restriction of Excessive Authentication Attempts vulnerability in multiple products

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
lemonldap-ng
debian
CWE-307
NVD
Published: 2021-07-30
Updated: 2024-11-21

Summary

An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.

Vulnerable Configurations

Part Description Count
Application
Lemonldap-Ng
78
OS
Debian
1

Common Weakness Enumeration (CWE)

References