392 matches found
Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues
Summary Multiple vulnerabilities affect IBM Sterling External Authentication Server and are addressed in the latest release and fixpack Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang:...
Security Bulletin: IBM Sterling External Authentication Server is vulnerable to denial-of-service due to IBM Java Runtime
Summary A buffer-overflow flaw in the OMR component of the OpenJ9 JVM may allow a local attacker to inflict a denial-of-service by inducing a JVM crash. IBM Sterling External Authentication Server has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTION: In the...
CVE-2026-23624 GLPI is vulnerable to session stealing on externally authenticated user change
GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patch...
CVE-2026-23624 GLPI is vulnerable to session stealing on externally authenticated user change
GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patch...
CVE-2026-23624 GLPI is vulnerable to session stealing on externally authenticated user change
GLPI is a free asset and IT management software package. In versions starting from 0.71 to before 10.0.23 and before 11.0.5, when remote authentication is used, based on SSO variables, a user can steal a GLPI session previously opened by another user on the same machine. This issue has been patch...
Debian dsa-6104 : python-keystonemiddleware-doc - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6104 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6104-1 [email protected] https://www.debian.org/security/ Moritz...
[SECURITY] [DSA 6104-1] python-keystonemiddleware security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6104-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 20, 2026 https://www.debian.org/security/faq -...
Security Bulletin: Due to use of Eclipse Jersey, IBM Sterling External Authentication Server is affected by unauthorized trust in insecure servers.
Summary IBM Sterling External Authentication Server is affected by a vulnerability in Eclipse Jersey and it is addressed in the latest fixpack Vulnerability Details CVEID:CVE-2025-12383 DESCRIPTION: In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL...
The vulnerability of the Red Hat Ansible Automation Platform lies in the lack of proper input sanitization when requesting an external authentication server. This allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Red Hat Ansible Automation Platform lies in the lack of proper input sanitization when requesting an external authentication server. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
CVE-2019-12428
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization...
Konica Bizhub Multifunction Printers Incorrect Authorization (CVE-2021-20868)
If external server authentication is used, a remote attacker with administrative privileges could steal user credentials by sending specific SOAP messages. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504865; scriptversion"1.2";...
Konica Bizhub Multifunction Printers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-20869)
When using external authentication with an LDAP server, a remote attacker could steal specific authentication information in Administrator settings by sending specific SOAP messages. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504863; scriptversion"1.2";...
The vulnerability of the MQ Channel Creation component in Qualcomm’s embedded chips allows a hacker to gain unauthorized access to protected information.
The vulnerability of the MQ Channel Creation component in Qualcomm’s embedded chips is related to the lack of proper input sanitization when requesting external authentication servers. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
CVE-2025-7736
Technical details about CVE-2025-7736 are not publicly available in the provided connected documents. The initial record includes remediation notes but no explicit affected versions, root cause, exploit details, or patch specifics beyond the GitLab patch release. Monitor for updates.
EUVD-1999-1462
Malware in sbrugna...
EUVD-2019-16258
Malware in sbrugna...
EUVD-2017-0122
Malware in sbrugna...
EUVD-2013-0034
Malware in sbrugna...