Lucene search
Philip AkessonPATCHSTACK:CB76EF0DEB1A49BAD4DB4C82086E0A1BHistoryOct 02, 2020 - 12:00 a.m.
WordPress Microsoft Office 365 / Azure AD | LOGIN plugin <= 11.6 - JWT Signature Verification Bypass vulnerability
2020-10-0200:00:00
Philip Akesson
patchstack.com
7
0.001 Low
EPSS
Percentile
49.7%
JWT Signature Verification Bypass vulnerability found by Philip Akesson in WordPress Microsoft Office 365 / Azure AD | LOGIN plugin (versions <= 11.6).
Solution
Update the WordPress Microsoft Office 365 / Azure AD | LOGIN plugin to the latest available version (at least 11.7).
Related
cvelist
cvelist
CVE-2020-26511
2020-10-02 04:04:01
cve
cve
CVE-2020-26511
2020-10-02 05:15:12
wpvulndb
wpvulndb
WordPress + Microsoft Office 365 < 11.7 - JWT Signature Verification Bypass
2020-10-02 00:00:00
prion
prion
Authentication flaw
2020-10-02 05:15:00
nvd
nvd
CVE-2020-26511
2020-10-02 05:15:12