Making public as the issues are public elsewhere.
** Information type changed from Private Security to Public Security
** Changed in: lemonldap-ng (Ubuntu)
Status: New => Confirmed
** Changed in: lemonldap-ng (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Debian
Perl Group, which is subscribed to lemonldap-ng in Ubuntu.
https://bugs.launchpad.net/bugs/1829016
Title:
CVE-2019-12046: anonymous session allowed when tokens are stored in
session DB
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lemonldap-ng/+bug/1829016/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~pkg-perl-maintainers
Post to : [email protected]
Unsubscribe : https://launchpad.net/~pkg-perl-maintainers
More help : https://help.launchpad.net/ListHelp