CVE-2016-7191: Improper Authentication

The Microsoft Azure Active Directory Passport aka Passport-Azure-AD library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token...

PT-2016-7261

Name of the Vulnerable Software and Affected Versions passport-azure-ad versions 1.x through 1.4.5 passport-azure-ad versions 2.x through 2.0.0 Description The issue allows remote attackers to bypass authentication via a crafted token because the validateIssuer setting is not recognized...

Debian DSA-2052-1 : krb5 - NULL pointer dereference

Shawn Emery discovered that in MIT Kerberos 5 krb5, a system for authenticating users and services on a network, a NULL pointer dereference flaw in the Generic Security Service Application Program Interface GSS-API library could allow an authenticated remote attacker to crash any server applicati...