OneLogin SAML SSO <= 2.4.2 - Signature Wrapping

OneLogin SAML SSO updates php-saml library to 2.10.0 it includes SAML Signature Wrapping attack prevention and other security improvements...

OneLogin SecureNotes Breach Exposed Data in Cleartext

Single sign-on company OneLogin began notifying customers this week that an attacker was able to take advantage of a bug in its system and view sensitive notes posted by users, thought to be secure. The company, whose authentication technology secures cloud-based applications, confirmed the...

WordPress OneLogin SAML SSO Plugin Authentication Bypass Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation.OneLogin SAML SSO is one of the plug-ins that allows users to access WordPress sites through SAML single sign-on or authentication with one click. An authentication bypass vulnerability...

Uber paid found the login bypass vulnerability researcher 1 million dollars-vulnerability warning-the black bar safety net

! Car share company Uber recently to repair the company's website, a vulnerability that can allow an attacker without the password can also log some “. uber.com” the website, and further on its internal network attacks. Uber rewards in the last month found that the vulnerability of the Finnish...

Uber Pays Researcher $10K for Login Bypass Exploit

Ridesharing company Uber recently patched a vulnerability in its site that could have allowed an attacker to log into some “.uber.com” sites without a password and further compromise its internal network. Uber awarded Finnish security researcher Jouko Pynnönen $10,000 for discovering the flaw las...

WordPress OneLogin SAML SSO Plugin <= 2.1.5 - Authentication Bypass

This plugin has a bug which allows anyone to login without a password or other authentication. Solution Update the plugin...

OneLogin SAML SSO <= 2.1.5 - Authentication Bypass

The OneLogin SAML SSO WordPress plugin was affected by an Authentication Bypass security vulnerability...

WordPress OneLogin SAML SSO Plugin <= 2.1.8 - Privilege Escalation

This plugin is prone to a privilege escalation vulnerability. Solution Update the plugin...

OneLogin SAML SSO <= 2.1.8 - Provisioned User Hardcoded Password

The OneLogin SAML SSO WordPress plugin was affected by a Provisioned User Hardcoded Password security vulnerability...

Uber: OneLogin authentication bypass on WordPress sites via XMLRPC

When a user logs on one of your WordPress sites via OneLogin, the authentication plugin creates a new entry in the WordPress user database with the default password @@@nopass@@@. This wouldn't be a problem if the plugin disabled all normal WordPress authentication methods, but it doesn't. The...

Uber: OneLogin authentication bypass on WordPress sites

First, I'm sorry about reporting another WordPress bug my intention was just to check if WP-OneLogin stores any sensitive info that could be used to attack OneLogin on your other websites. Overview The .uber.com WordPress sites use OneLogin SAML-SSO instead of the normal WordPress login. The...