Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 23:30:12 +0000 cnvd-2017-37823 https://cve.radiocsirt.org/vuln/cnvd-2017-37823 cnvd-2017-37823 https://cve.radiocsirt.org/vuln/cnvd-2017-37823 EUVD-2026-76737 https://cve.radiocsirt.org/vuln/euvd-2026-76737 EUVD-2026-76737 https://cve.radiocsirt.org/vuln/euvd-2026-76737 fkie_cve-2017-11501 https://cve.radiocsirt.org/vuln/fkie_cve-2017-11501 <p>NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.</p> <p>NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-11501 GHSA-9ggv-74q3-4mc4 https://cve.radiocsirt.org/vuln/ghsa-9ggv-74q3-4mc4 <p>NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.</p> <p>NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.</p> https://cve.radiocsirt.org/vuln/ghsa-9ggv-74q3-4mc4 gsd-2017-11501 https://cve.radiocsirt.org/vuln/gsd-2017-11501 gsd-2017-11501 https://cve.radiocsirt.org/vuln/gsd-2017-11501