CVE-2020-16093: Debian Linux

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

Affected products

• Debian Debian Linux: version 10.0 only
• Lemonldap-NG Lemonldap::ng: up to and including 2.0.8

Published 2022-07-18. Last modified 2026-06-17.