Debian: CVE-2020-36659: libapache-session-browseable-perl -- security update

Debian: CVE-2020-36659: libapache-session-browseable-perl -- security update

Severity

9

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

01/27/2023

Created

01/31/2023

Added

01/30/2023

Modified

01/28/2025

Description

In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with the CVE-2020-16093 fix.

Solution(s)

• debian-upgrade-libapache-session-browseable-perl

References

• https://attackerkb.com/topics/cve-2020-36659
• CVE - 2020-36659
• DLA-3285-1