156 matches found
CVE-2026-123553
OpenAM before 16.1.4 ships built-in identities in the Top Level Realm demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth with passwords that are identical on every installation, publicly known, and able to authenticate. Unauthenticated remote attackers can log in as these identities to...
EUVD-2026-119438
OpenAM before 16.1.4 ships built-in identities in the Top Level Realm demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth with passwords that are identical on every installation, publicly known, and able to authenticate. Unauthenticated remote attackers can log in as these identities to...
CVE-2026-123553
OpenAM before 16.1.4 ships built-in identities in the Top Level Realm demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth with passwords that are identical on every installation, publicly known, and able to authenticate. Unauthenticated remote attackers can log in as these identities to...
PT-2026-139834
Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.4 Description Built-in identities in the Top Level Realm, specifically demo, anonymous, wsc, wsp, SecurityTokenService, and agentAuth, are shipped with identical, publicly known passwords across all installations...
CVE-2026-123553: OpenIdentityPlatform OpenAM: OpenAM before 16.1.4 ships built-in identities in the Top Level Realm (demo, anonymous, wsc, wsp, SecurityTokenService…
OpenAM before 16.1.4 ships built-in identities in the Top Level Realm demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth with passwords that are identical on every installation, publicly known, and able to authenticate. Unauthenticated remote attackers can log in as these identities to...
Replay Attack
Overview Affected versions of this package are vulnerable to Replay Attack in the SamlAssertionConsumerFunction class, which validates the response and assertion signatures, Recipient, SubjectConfirmationData.NotOnOrAfter, InResponseTo, Conditions, and Audience, but never reads or stores...
Improper Token Validation
pac4j-oidc is vulnerable to Improper Token Validation. The vulnerability is due to the library accepting OIDC callbacks that contain only an access token without performing authorization code or ID token validation, where attackers can substitute access tokens minted for other clients to create...
CVE-2026-116201
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...
CVE-2026-116201 Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...
EUVD-2026-109459
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...
CVE-2026-116201
The software Snipe-IT versions before 8.5.0 is vulnerable to a SAML assertion replay vulnerability. The root cause is a non-atomic nonce check within the SAML acs handler , which creates a race condition . By sending concurrent POST requests to /saml/acs using a single captured assertion, an atta...
CVE-2026-116201 Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...
CVE-2026-116201 Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...
Grokability Snipe-IT authorization issue vulnerability
Versions of Grokability Snipe-IT prior to 8.5.0 contain an authorization issue vulnerability. This flaw stems from the non-atomic nature of nonce checks within the SAML acs handler, potentially enabling SAML assertion replay. Attackers can send concurrent POST requests to /saml/acs to reuse...
PT-2026-123042
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...
Part-DB trust management issue vulnerability
Versions prior to Part-DB 2.12.1 contain a trust management vulnerability. This arises because the .env file contains a fixed APPSECRET value, and the official Docker image fails to overwrite or randomize this value upon container startup. Attackers can exploit this key to forge remember-me cooki...
CVE-2026-63161 Omnispace Agora Project < 26.10.0 Session Fixation via Authentication
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...
CVE-2026-63161
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...
CVE-2026-63161
The Omnispace Agora Project versions prior to 26.10.0 are susceptible to a session fixation vulnerability (CWE-384). This flaw occurs because the application fails to regenerate the session identifier upon successful authentication. A remote attacker can exploit this by planting a known session i...
EUVD-2026-100581
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...