| Summary | Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty client_password parameter (client secret). |
|---|---|
| Publication Date | Oct. 9, 2024, 2:15 p.m. |
| Registration Date | Oct. 9, 2024, 8 p.m. |
| Last Update | Oct. 10, 2024, 9:51 p.m. |