[Git][security-tracker-team/security-tracker][master] Add CVE-2021-40874/lemonldap-ng

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1cfc1388 by Salvatore Bonaccorso at 2022-01-15T09:37:05+01:00
Add CVE-2021-40874/lemonldap-ng

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -20864,8 +20864,11 @@ CVE-2021-40876
 	RESERVED
 CVE-2021-40875 (Improper Access Control in Gurock TestRail versions < 7.2.0.3014 re ...)
 	NOT-FOR-US: Gurock TestRail
-CVE-2021-40874
+CVE-2021-40874 [RESTServer pwdConfirm always returns true with Combination + Kerberos]
 	RESERVED
+	- lemonldap-ng <unfixed>
+	NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2612
+	NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/66946e8f754812b375768c2124937137c856fe0c
 CVE-2021-40873 (An issue was discovered in Softing Industrial Automation OPC UA C++ SD ...)
 	NOT-FOR-US: Softing Industrial Automation
 CVE-2021-40872 (An issue was discovered in Softing Industrial Automation uaToolkit Emb ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1cfc138819dcddfa1ac399a430c394b9fe3ea1b5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1cfc138819dcddfa1ac399a430c394b9fe3ea1b5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220115/a5f4e659/attachment.htm>