Lucene search
MicrosoftCVELIST:CVE-2016-7191HistorySep 28, 2016 - 8:00 p.m.
CVE-2016-7191
2016-09-2820:00:00
microsoft
www.cve.org
The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.
Related
nodejs
nodejs
Authentication Bypass
2016-10-27 16:03:12
github
github
Authentication Bypass in passport-azure-ad
2018-07-26 15:53:31
symantec
symantec
prion
prion
Authentication flaw
2016-09-28 20:59:00
cve
cve
CVE-2016-7191
2016-09-28 20:59:00
osv
osv
Authentication Bypass in passport-azure-ad
2018-07-26 15:53:31
nvd
nvd
CVE-2016-7191
2016-09-28 20:59:00
mscve
mscve
Win32k Elevation of Privilege Vulnerability
2016-10-11 07:00:00
mskb
mskb
MS16-123: Security update for kernel-mode drivers: October 11, 2016
2016-10-11 00:00:00
nessus
nessus
MS16-123: Security Update for Windows Kernel-Mode Drivers (3192892)
2016-10-12 00:00:00