A vulnerability was found in LemonLDAP::NG up to 2.20.0 and classified as critical. This issue affects some unknown processing of the component Session Refresh. The manipulation leads to improper authentication.

The identification of this vulnerability is CVE-2024-52946. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.