Confluence breaks SSO integration (PATCH)

A long time ago when I wrote our authenticator for wikis.sun.com, I noticed that under some circumstances our SSO server didn't redirect back to wikis.sun.com correctly. It redirected to a confluence URI without specifying the host and the domain, which resulted in the browser ending up on our SS...

Design/Logic Flaw

WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing phishing attacks via an absolute URL in the url parameter, which loads the URL inside a frame...

CVE-2006-0731

SAP Business Connector Core (WmRoot/adapter-index.dsp) vulnerability (CVE-2006-0731) affects Core Fix 7 and earlier. An absolute URL in the url parameter can be loaded inside a frame, enabling remote phishing spoofing attacks. Exploitation details or in-the-wild activity are not provided in the s...