{
  "cveId": "CVE-2024-52946",
  "url": "https://patchblox.com/security/cve/CVE-2024-52946",
  "summary": "CVE-2024-52946 is fixed in lemonldap-ng on 1 platform, first by DEBIAN-CVE-2024-52946, released November 18, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "lemonldap-ng: An issue was discovered in LemonLDAP::NG before 2.20.1",
  "description": "An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an \u0022Adaptative authentication rule\u0022 with an increment instead of an absolute value.",
  "published": "2024-11-18T06:15:06Z",
  "severity": "high",
  "cvss": 8.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00487,
  "epssPercentile": 0.42172,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "lemonldap-ng",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.16.1\u002Bds-deb12u4",
      "fix": "DEBIAN-CVE-2024-52946",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-52946",
      "released": "2024-11-18T06:15:06Z"
    },
    {
      "platform": "linux",
      "product": "lemonldap-ng",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.20.1\u002Bds-1",
      "fix": "DEBIAN-CVE-2024-52946",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-52946",
      "released": "2024-11-18T06:15:06Z"
    },
    {
      "platform": "linux",
      "product": "lemonldap-ng",
      "release": "Debian 14",
      "fixedVersion": "2.20.1\u002Bds-1",
      "fix": "DEBIAN-CVE-2024-52946",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-52946",
      "released": "2024-11-18T06:15:06Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}