CVE-2019-15941

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1881Third Party Advisory
https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-0-6-is-out/Third Party Advisory
https://seclists.org/bugtraq/2019/Sep/46Mailing List, Third Party Advisory
https://www.debian.org/security/2019/dsa-4533Third Party Advisory
https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1881Third Party Advisory
https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-0-6-is-out/Third Party Advisory
https://seclists.org/bugtraq/2019/Sep/46Mailing List, Third Party Advisory
https://www.debian.org/security/2019/dsa-4533Third Party Advisory

Timeline

Published: Sep 25, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-159428.8FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavco CVE-2019-159438.8vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by c CVE-2019-159445.3In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message.CVE-2019-159456.4OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.CVE-2019-159466.4OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.CVE-2019-159477.5In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mi CVE-2019-159488.8Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a b CVE-2019-159498.8Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as t CVE-2019-15956.5A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, ad CVE-2019-159506.1The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.CVE-2019-159528.8An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to CVE-2019-159538.8An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not