CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

OESA-2022-1659 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: This security flaw in curl allows to reuse an OAUTH2 authenticated connection without properly ensuring that the connection is authenticated wi...

UBUNTU-CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

CVE-2021-32753

EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists in the Edinburgh, Fuji, Geneva, and Hanoi versions of the software. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user is...

CVE-2021-29157

Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver...

OAUTH: " Failed to login the user due to insufficient claims. Please contact your administrator"

Customer has configured Citrix Gateway as OAuth IDP with Workspace in Cloud and after user authentication is completed, users were getting the error as shown below " Failed to login the user due to insufficient claims. Please contact your administrator" The Attributes sent by Citrix Gateway OAuth...

CVE-2019-5625 Eaton Halo Home Android App Insecure Storage

The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by...

CVE-2019-10114

An Information Exposure issue issue 2 of 2 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OAuth authentication process, the application attempts to validate a parameter in an insecure way, potentially exposing da...

CVE-2019-10114

An Information Exposure issue issue 2 of 2 was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OAuth authentication process, the application attempts to validate a parameter in an insecure way, potentially exposing da...

CVE-2019-10114

GitLab CVE-2019-10114 affects GitLab Community and Enterprise Edition prior to 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Root cause: during OAuth authentication, a parameter is validated in an insecure way, potentially exposing data. Impact: information exposure through OAuth flow. ...

OAuth2. 0 deploy properly, billions of Android Apps account memory leak risk-vulnerability warning-the black bar safety net

The University of Hong Kong, three security researchers have found that many support single sign-on App no the correct deployment of OAuth2. 0 authentication Protocol, the attacker can use this vulnerability to remotely login to any user's App account. Ronghai Yang, Wing Cheong Lau and Tianyu Liu...

Facebook SDK vulnerability threatening millions of mobile phone users accounts-vulnerability warning-the black bar safety net

From MetaIntell the smartphone leadership risk management（MRM）security researchers, found a latest version of Facebook SDK vulnerability in the vulnerability exposes millions of Facebook user's authentication token, it still sounds very scary. ! Facebook for Android and IOS SDK provides the use o...

Google Recommends Developers Support OAuth 2.0

Google announced today that in the coming months it will be more stringent in securing users when they log in to their accounts by applying additional authorization checks. “These additional checks will ensure that only the intended user has access to their account, whether through a browser,...

Month Of Twitter Bugs - bit.ly XSS

Wednesday, July 1, 2009 MoTB 01: Multiple vulnerabilities in bit.ly service What is bit.ly "bit.ly allows users to shorten, share, and track links URLs. Reducing the URL length makes sharing easier. bit.ly can be accessed through our website, bookmarklets and a robust and open API. bit.ly is also...

Month Of Twitter Bugs - Twitterfall XSS

Wednesday, July 8, 2009 MoTB 08: DOM Based XSS in Twitterfall What is Twitterfall "Twitterfall is a way of viewing the latest 'tweets' of upcoming trends and custom searches on the micro-blogging site Twitter. Updates fall from the top of the page in near-realtime.." Twitterfall home page Twitter...