7975 matches found
CVE-2021-33712
A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...
CVE-2021-33712
A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...
Design/Logic Flaw
A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...
CVE-2021-33712
A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...
CVE-2021-33712
A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...
Information Disclosure
Jenkins Config File Provider Plugin is vulnerable to information disclosure. It does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs. A flaw was found in the config-file-provider Jenkins plugin. The plugin does no...
XML External Entity (XXE)
Jenkins Config File Provider Plugin is vulnerable to XML external entity XXE. It does not configure its XML parser to prevent XML external entity XXE attacks. A flaw was found in the config-file-provider Jenkins plugin. The plugin XML parser wasn't configure to prevent XML external entity XXE...
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
...
Citrix Application Delivery Controller and Citrix Gateway - SAML Configuration Reference Guide
This article is intended for customers who have configured their Citrix ADC or Citrix Gateway as SAML IdP Identity Provider or SAML SP Service Provider or both. If Citrix ADC or Citrix Gateway appliances are not upgraded to the recommended versions and if the SAML configuration is not configured...
Mendix SAML 数据伪造问题漏洞
The Mendix SAML Module allows authenticating users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An elevation of privilege vulnerability exists in the Siemens Mendix SAML Module. An authenticated, remote attacker coul...
VulnCheck KEV: CVE-2021-31199
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...
CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Recent assessments: architect00 at June 09, 2021 6:55am UTC reported: This vulnerability is abused in an exploitation chain. According to the Microsoft advisory it is abused with Adobe Acrobat CVE-2021-28550. gwillcox-...
PT-2021-3270 · Microsoft · Enhanced Cryptographic Provider +1
Name of the Vulnerable Software and Affected Versions: Microsoft Enhanced Cryptographic Provider affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Enhanced Cryptographic Provider, which can be exploited to elevate privileges. This...
CVE-2021-31199
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at June 17, 2021 4:20pm UTC reported: Not got much to contribute due to limited public information at this time but I did want to note that the Confidentiality and Integrity scores for...
5 #TrendTips To Build Better in the Cloud
You have multiple cloud service provider accounts and you want to make sure that you are deploying everything in a well-architected fashion to avoid future security headaches. Here's where to begin...
VulnCheck KEV: CVE-2021-31201
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...
KLA12202 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...
Rockstar Games: Cache Poisoning DoS on updates.rockstargames.com
In this report, the researcher discovered that there was a cache poisoning weakness on updates.rockstargames.com due to an unkeyed header, trailer. By sending this header, an attacker could cause the cache to save a malformed response with status code 400. An example of such a request, as provide...
Command Execution Vulnerability in H3C SecPath Operations Audit System
Xinhua San Technology Co., Ltd. is a new IT solution provider, committed to become the most trusted partner for customers' business innovation and digital transformation. The main products are routers, big data, switches, IoT, cloud computing, servers and so on. A command execution vulnerability...
DRUPAL-CONTRIB-2021-014
This module allows users to authenticate against an Oauth 2.0 / OpenID Connect identity provider to login to your Drupal site. The module doesn't sufficiently protect against unauthorized local access, by way of using the 'password reset' facility, for users who are supposed to only be able to lo...