← Database

CVE-2024-45160

CRITICAL CVSS: 9.1 Published: 2024-10-09 Modified: 2026-06-17

Description

Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty client_password parameter (client secret).

Affected Platforms

Unknown

Weakness Type

CWE-863

References