← Back

Mod Auth Ldap

mod_auth_ldap

Vendor: Prosody • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-8086
2Debian
Prosody
3Debian Linux
Mod Auth LdapMod Auth Ldap2
Jun 17, 2026
Jan 28, 2020
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_admin() function. This grants remote entities admin-only functionality if their...Show more
The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_admin() function. This grants remote entities admin-only functionality if their username matches the username of a local admin.Show less