Launchpad.net

CVE 2019-12046

LemonLDAP::NG -2.0.3 has Incorrect Access Control.

CVE-2019-12046 (Candidate) is related to these bugs:

Bug #1829016: CVE-2019-12046: anonymous session allowed when tokens are stored in session DB

Summary				In	Importance	Status
	1829016	CVE-2019-12046: anonymous session allowed when tokens are stored in session DB		lemonldap-ng (Ubuntu)	High	Confirmed
	1829016	CVE-2019-12046: anonymous session allowed when tokens are stored in session DB		lemonldap-ng (Debian)	Unknown	Fix Released

See the

CVE page on Mitre.org for more details.