CVE-2020-16093

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

• CWE-295

• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2250Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lemonldap-ng.org/downloadVendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00027.htmlMailing List, Third Party Advisory
• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2250Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lemonldap-ng.org/downloadVendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00027.htmlMailing List, Third Party Advisory

Published

Jul 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1608Receipt of a specific MPLS or IPv6 packet on the core facing…7.5
• CVE-2020-16087An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8…8.6
• CVE-2020-16088iked in OpenIKED, as used in OpenBSD through 6.7, allows aut…9.8
• CVE-2020-1609When a device using Juniper Network's Dynamic Host Configura…8.8
• CVE-2020-16091Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-16092In QEMU through 5.0.0, an assertion failure can occur in the…3.8
• CVE-2020-16094In imap_scan_tree_recursive in Claws Mail through 3.17.6, a …7.5
• CVE-2020-16095The dlf (aka Kitodo.Presentation) extension before 3.1.2 for…6.1
• CVE-2020-16096In Gallagher Command Centre versions 8.10 prior to 8.10.1134…7.7
• CVE-2020-16097On controllers running versions of v8.20 prior to vCR8.20.20…4.6
• CVE-2020-16098It is possible to enumerate access card credentials via an u…9.8
• CVE-2020-16099In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) i…4.3