Unrated severityNVD Advisory· Published Apr 16, 2023· Updated Feb 6, 2025

CVE-2022-37186

Description

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LemonLDAP::NG/LemonLDAP::NGdescription
Lemonldap Ng/Lemonldap Ngllm-fuzzy
Range: <2.0.15

Patches

Vulnerability mechanics

References

gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/59c781b393947663ad3bf26bad0581413dd6fae4mitre
gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2758mitre
gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/releases/v2.0.15mitre
lists.debian.org/debian-lts-announce/2023/01/msg00027.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000