Get deeper into security at Microsoft Ignite 2018

This year at Microsoft Ignite, we will be making some exciting announcementsfrom new capabilities for identity management and information protection to powerful artificial intelligence AI innovations that can help you stay ahead of an often overwhelming surge in threats and security alerts. Join ...

Apache Syncope Information Disclosure Vulnerability (CNVD-2018-18783)

Apache Syncope is the United States Apache Apache Software Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. Apache Syncope suffers from an information disclosure vulnerabili...

[SECURITY] Fedora 27 Update: freeipa-4.6.4-2.fc27

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

IBM Security Identity Governance and Intelligence Command Injection Vulnerability

IBM Security Identity Governance and Intelligence IGI is a suite of identity management and governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Securi...

IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2018-24616)

IBM Security Identity Governance and Intelligence IGI is a suite of identity management and governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Securi...

What financial service providers should know about blockchain: Opportunities and threats

It seems that every few years, an advanced and innovative new technology emerges and becomes the next big thing for organizations across different industries. Take the cloud and big data, for example - during their buzzword stage, these concepts were being attached to just about everything in the...

Enable your users to work securely from anywhere, anytime, across all of their devices

This blog is part of a series that responds to common questions we receive from customers about deployment of Microsoft 365 Security solutions. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out our last blog, Assessing...

GlobaLeaks - The Open-Source Whistleblowing Software

GlobaLeaks is open-source / free software intended to enable secure and anonymous whistleblowing initiatives developed by the Hermes Center for Transparency and Digital Human Rights. For the user manual refer to the GlobaLeaks's User Manual. For the developer documentation refer to the GlobaLeaks...

identity.research.gov Open Redirect vulnerability

Open Bug Bounty ID: OBB-633838 Description| Value ---|--- Affected Website:| identity.research.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

IBM Security Identity Manager Virtual Appliance File Upload Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

SAP Identity Management XML External Entity Injection Vulnerability

SAP Identity Management is a suite of identity management applications from SAP that can be embedded into business processes. A security vulnerability exists in SAP Identity Management version 8.0, which arises from the program's failure to validate an XML document from an untrusted source. An...

SAP Identity Management Information Disclosure Vulnerability

SAP Identity Management is a suite of identity management applications from SAP that can be embedded into business processes. A security vulnerability exists in SAP Identity Management version 8.0. An attacker could exploit the vulnerability to access restricted information...

CVE-2018-2417

Under certain conditions, the SAP Identity Management 8.0 pass of type ToASCII allows an attacker to access information which would otherwise be restricted...

CVE-2018-2417

Under certain conditions, the SAP Identity Management 8.0 pass of type ToASCII allows an attacker to access information which would otherwise be restricted...

Authentication flaw

Under certain conditions, the SAP Identity Management 8.0 pass of type ToASCII allows an attacker to access information which would otherwise be restricted...

CVE-2018-2416

SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source...

Design/Logic Flaw

SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2416

SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2416

SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2417

CVE-2018-2417 affects SAP Identity Management 8.0, where a condition related to the ToASCII pass may enable an attacker to access information that should be restricted. The connected documents confirm the vulnerability as an information-disclosure issue but do not provide concrete technical detai...