CVE-2017-15700

A flaw in the org.apache.sling.auth.core.AuthUtilisRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials...

PT-2017-14149

Name of the Vulnerable Software and Affected Versions Apache Sling Authentication Service version 1.4.0 Description A flaw in the org.apache.sling.auth.core.AuthUtilisRedirectValid method allows an attacker to trick a victim into sending over their credentials through the Sling login form...

CVE-2017-15700: Exposure of Sensitive Information to an Unauthorized Actor

A flaw in the org.apache.sling.auth.core.AuthUtilisRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials...