2788 matches found
GitHub Enterprise - SAML Authentication Bypass
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be...
Mattermost Desktop 9.5.x < 9.5.9 / 9.11.x < 9.11.1 (MMSA-2024-00363)
The version of Mattermost Desktop installed on the remote host is prior to 9.5.9 or 9.11.1. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00363 advisory. - Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one...
GO-2024-3227 Mattermost incorrectly issues two sessions when using desktop SSO in github.com/mattermost/mattermost-server
Mattermost incorrectly issues two sessions when using desktop SSO in github.com/mattermost/mattermost-server...
GHSA-HM57-H27X-599C Mattermost incorrectly issues two sessions when using desktop SSO
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 incorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
Mattermost incorrectly issues two sessions when using desktop SSO
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 incorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
CVE-2024-10214
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
CVE-2024-10214
CVE-2024-10214 affects Mattermost: specifically Mattermost 9.11.x (<=9.11.1) and 9.5.x (
CVE-2024-10214
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
CVE-2024-10214 Incorrect Session Creation with Desktop SSO
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
CVE-2024-10214 Incorrect Session Creation with Desktop SSO
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
PT-2024-16119
Name of the Vulnerable Software and Affected Versions Mattermost versions 9.5.x through 9.5.9 Mattermost versions 9.11.X through 9.11.1 Description The issue arises when using desktop SSO, where Mattermost incorrectly issues two sessions - one in the browser and one in the desktop application, bo...
CVE-2024-10214: Incorrect Implementation of Authentication Algorithm
Mattermost versions 9.11.X = 9.11.1, 9.5.x = 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings...
Exploit for Authentication Bypass by Spoofing in Zabbix
CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerabi...
CVE-2024-9487
creationtimestamp| type| source ---|---|--- 2024-10-11 01:07:50+00:00| seen| https://t.me/cvedetector/7642 2024-10-15 10:13:12+00:00| seen| https://t.me/hackyourmom/9356 2024-10-16 07:08:52+00:00| seen| https://t.me/thehackernews/5737 2024-10-16 11:02:41+00:00| seen|...
CVE-2024-9487
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be...
CVE-2024-9487 An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be...
CVE-2024-9487 An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted assertions feature was enabled
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be...
CVE-2024-9487: Improper Verification of Cryptographic Signature
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be...
PT-2024-6935
Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.15 GitHub Enterprise Server version 3.11.16 GitHub Enterprise Server version 3.12.10 GitHub Enterprise Server version 3.13.5 GitHub Enterprise Server version 3.14.2 Description The vulnerability is...
kodland-sso-server (>=0.1.1, <=0.3.0) potentially affected by CVE-2024-45231 via django (2.0.1)
django PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kodland-sso-server =0.1.1, =0.3.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...