PT-2019-4124 · Lemonldap · Lemonldap::Ng

Maxbes + 1 · Published 2019-09-25 · Updated 2020-08-18 · CVE-2019-15941

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LemonLDAP::NG versions 2.x through 2.0.5

Description The issue is related to improper authorization in the OpenID Connect Issuer of LemonLDAP::NG. It allows an attacker to bypass access control rules via a crafted OpenID Connect authorization request. This can happen if there exists an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs. Exploitation of this issue may allow a remote attacker to gain unauthorized access to information, compromising its integrity and availability, by using a specially crafted OpenID Connect authorization request.

Recommendations For LemonLDAP::NG versions 2.x through 2.0.5, consider disabling the OpenID Connect Issuer feature until a patch is available, or ensure that all OIDC Relaying parties have strong access control rules and implement filtering on redirection URIs to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2019-04703

CVE-2019-15941

DSA-4533-1

Affected Products

Lemonldap::Ng

References · 17

• https://debian.org/security/2019/dsa-4533 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04703 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-15941 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15941 · Security Note
• https://ubuntu.com/security/CVE-2019-15941 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4533-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-15941 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-15941 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15941 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4533-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-15941 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/lemonldap-ng · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15941 · Security Note
• https://packages.debian.org/src:lemonldap-ng · Note
• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1881 · Note