285 matches found
CVE-2018-7534: Undefined Security Weakness
In Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key may be left in memory...
PT-2018-18139
Name of the Vulnerable Software and Affected Versions Unisys Stealth Solution Stealth Authorization Server versions prior to 3.3.017.0 Description The issue concerns an encryption key potentially being left in memory in the Stealth Authorization Server component of Unisys Stealth Solution...
Shining a Light on OAuth Abuse with PwnAuth
Introduction Spear phishing attacks are seen as one of the biggest cyber threats to an organization. It only takes one employee to enter their credentials or run some malware for an entire organization to become compromised. As such, companies devote significant resources to preventing credential...
Internet Bug Bounty: open redirect in rfc6749
OAuth Providers servers that strictly follow rfc6749 are vulnerable to open redirect. Let me explain, reading 0 If the request fails due to a missing, invalid, or mismatching redirection URI, or if the client identifier is missing or invalid, the authorization server SHOULD inform the resource...
