Liman MYS vulnerabilities

An LDAP injection vulnerability in HAVELSAN Inc. Liman MYS allows an attacker to manipulate LDAP queries due to improper neutralization of special elements. The issue affects versions before release.Master.1107.

An improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows fake the source of data. This issue affects Liman MYS versions before release.Master.1107.

A missing authorization vulnerability in HAVELSAN Inc. Liman MYS allows accessing functionality not properly constrained by ACLs. This issue affects versions before release.Master.1107.

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS from 2.3.2 before 2.3.4-1124.

Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing privilege escalation.

Liman MYS from 2.2.3 before 2.3.1 has a missing authorization vulnerability allowing access to functionality not properly constrained by ACLs.