adaPwn

adaPwn - CVE-2019-14912 PoC Il modulo adAS OPENSSO non verifica correttamente il dominio a cui reindirizzare, rendendo possibile reindirizzare l'utente verso un sito web controllato dall'attaccante, rubando il suo cookie di sessione adAS. Utilizzo usage: adaPwn.py -h --interface INTERFACE...

CVE-2019-14912

An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie...

CVE-2019-14912

An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie...

CVE-2019-14912

The CVE-2019-14912 entry concerns PRiSE adAS 1.7.0, where the OPENSSO module fails to validate the goto parameter, causing an open redirect that leaks the user session cookie. Multiple sources (NVD, Red Hat, CVE lists) confirm the affected product and the underlying cause. Exploitation details an...