CVE-2012-6426

CVE-2012-6426 describes a critical access control bypass vulnerability in LemonLDAP::NG versions prior to 1.2.3. The flaw stems from the software's failure to utilize the signature-verification feature of the Lasso library, enabling remote attackers to bypass security restrictions through crafted SAML data. With a CVSS score of 7.5, this vulnerability is highly severe, allowing for potential compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.