Identity: The New Cybersecurity Battleground

The rapid adoption of cloud services, SaaS applications, and the shift to remote work have fundamentally reshaped how enterprises operate. These technological advances have created a world of opportunity but also brought about complexities that pose significant security threats. At the core of...

Malicious code in ccf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1d06cfd35d1e890891bb8c0478cd64f1c31901595ecd8a80a676d989d93b86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2167 Malicious code in ccf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1d06cfd35d1e890891bb8c0478cd64f1c31901595ecd8a80a676d989d93b86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1515

The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8. This is due to insufficient identity verification on the LinkedIn login request process. This makes it possible for unauthenticated attackers to bypass official...

CVE-2025-27674

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006...

PT-2025-9833 · Opentext · Opentext Identity Manager Advanced Edition

Name of the Vulnerable Software and Affected Versions: OpenText Identity Manager Advanced Edition versions 4.8.0.0 through 4.9.0.0 Description: The issue is related to insufficiently protected credentials, allowing an authenticated user to obtain higher privileged user’s sensitive information via...

OpenText Identity Manager Advanced Edition 安全漏洞

OpenText Identity Manager Advanced Edition is an advanced version of identity management software from OpenText Canada Inc. It is used to manage user access rights in IT environments for identity management. A security vulnerability exists in OpenText Identity Manager Advanced Edition versions...

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.843 Application 20.0.1923, which stems from hard-coded IdP keys...

Vasion Print 信息泄露漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.843 Application 20.0.1923 that stems from a flaw in the OpenID implementation...

CVE-2025-1969

Improper request input validation in Temporary Elevated Access Management TEAM for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process...

CVE-2025-1969 Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Improper request input validation in Temporary Elevated Access Management TEAM for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process...

CVE-2025-1969 Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Improper request input validation in Temporary Elevated Access Management TEAM for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process...

CVE-2025-1969

CVE-2025-1969 involves AWS IAM Identity Center’s Temporary Elevated Access Management (TEAM). The issue is improper input validation that lets a user modify a valid request and spoof an approval in TEAM. Affected component: TEAM (Temporary Elevated Access Management) within AWS IAM Identity Cente...

Malicious code in angular-identity-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54c4b1fd6456e049589f15a4f03fe3fdb5370f3e9d0d66e8664835e3c7cb5f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2091 Malicious code in angular-identity-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54c4b1fd6456e049589f15a4f03fe3fdb5370f3e9d0d66e8664835e3c7cb5f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Amazon AWS Temporary Elevated Access Management 访问控制错误漏洞

Amazon AWS Temporary Elevated Access Management Amazon AWS TEAM is an open source privilege management solution integrated with AWS IAM Identity Center from Amazon.com, Inc. It is used to manage and monitor AWS Temporarily Elevated Access at scale. A security vulnerability exists in Amazon AWS...

Linux Distros Unpatched Vulnerability : CVE-2014-3520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Identity Keystone before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthoriz...

Linux Distros Unpatched Vulnerability : CVE-2015-7546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The identity service in OpenStack Identity Keystone before 2015.1.3 Kilo and 8.0.x before 8.0.2 Liberty and keystonemiddleware formerly python-keystoneclient...

Linux Distros Unpatched Vulnerability : CVE-2014-3476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Identity Keystone before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2015-5217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service...