CVEs-PoC/2020/CVE-2020-16093.md

CVE-2020-16093

Description

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Live-Hack-CVE/CVE-2020-16093
• https://github.com/Live-Hack-CVE/CVE-2020-36658
• https://github.com/Live-Hack-CVE/CVE-2020-36659