CVE-2012-6426

Published: Jan 1, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data.

Affected (26)

Products: Lemonldap Ng: Lemonldap\

Lemonldap Ng

1 product

Lemonldap\

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Lemonldap Ng Lemonldap\	Version \
Lemonldap Ng Lemonldap\	Version \
Lemonldap Ng Lemonldap\	Version \
Lemonldap Ng Lemonldap\	Version \
Lemonldap Ng Lemonldap\	Version \
Lemonldap Ng Lemonldap\	Version \
Lemonldap Ng Lemonldap\	Version \
Lemonldap Ng Lemonldap\	Up to 1.2.2
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng
Lemonldap Ng Lemonldap\	Version \ ng