OneLogin SAML SSO <= 2.4.2 - Signature Wrapping

OneLogin SAML SSO updates php-saml library to 2.10.0 it includes SAML Signature Wrapping attack prevention and other security improvements...

HackerOne: (HackerOne SSO-SAML) Login CSRF, Open Redirect, and Self-XSS Possible Exploitation

Summary: Login CSRF, Open Redirect, and Self-XSS Possible Exploitation through HackerOne SSO-SAML PoC - Go to █████; Use a browser window with clear cookies. Source-code: setTimeoutfunctiondocument.location.href = "https://hackerone.com/users/saml/signin?email=████&rememberme=true";, 5000; Impact...

Single Sign on Support for Linux Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Question The client wants to achieve authenticated access to XenApp/XenDesktop infrastructure via...

HackerOne: Slack integration setup lacks CSRF protection

Details: Summary: Cross-site Request Forgery in the Integrations https://hackerone.com/YOURTEAM/integrations feature for teams. Description Include Impact: The Integrations flow is insecure, because it can be abused by CSRF. PoC: Request GET https://hackerone.com/auth/slack HTTP/1.1 Response...

Information disclosure

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerabilit...

CVE-2016-3352

Summary: CVE-2016-3352 describes an information-disclosure vulnerability in Windows NTLM SSO validation for Microsoft Account (MSA) logins. Details across connected docs show that Windows clients (Windows 8.1, Windows RT 8.1, Windows 10 variants 1511/1607, and related builds) do not properly vali...

New Relic: SSO Authentication Bypass

Hi, As I reported to [email protected], here's the authentication bypass vulnerability report. I've left some details out in this report but you're welcome to reach out to me with any questions. Here's a more detailed overview: SSO Authentication Bypass Summary It is possible to POST a custom...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 53.0.2785.103 Platform version: 8530.81.0 for all Chrome OS devices except Google Chromebook Pixel 2015, Acer Chromebook R11, ASUS Chromebook Flip C100PA, HP Chromebox CB1, and Acer C7 Chromebook. This build contains a number of bug fixes, security updates,...

sso.garmin.com Open Redirect vulnerability

Vulnerable URL: https://sso.garmin.com/sso/login?service=https://www.openbugbounty.org=olaxpw-conctmodern008=true Details: Description| Value ---|--- Patched:| Yes, at 23.08.2017 Latest check for patch:| 23.08.2017 11:55 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

CVE-2016-3687

Summary (CVE-2016-3687) Open redirect vulnerability in F5 BIG-IP APM (multi‑domain SSO) and BIG-IP Edge Gateway, caused by insufficient validation of the SSO_ORIG_URI parameter. Affected: BIG-IP APM 11.4.0–11.6.0 (and 11.2.1); Edge Gateway 11.2.1. Attacker can craft base64‑encoded SSO_ORIG_URI to...

F5 Networks BIG-IP : BIG-IP APM SSO vulnerability (K26738102)

Insufficient validation of the SSOORIGURI parameter occurs when using multi-domain single sign-on SSO. CVE-2016-3687 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution K26738102. The text description of this plug...

WordPress OneLogin SAML SSO Plugin <= 2.1.5 - Authentication Bypass

This plugin has a bug which allows anyone to login without a password or other authentication. Solution Update the plugin...

OneLogin SAML SSO <= 2.1.5 - Authentication Bypass

The OneLogin SAML SSO WordPress plugin was affected by an Authentication Bypass security vulnerability...

WordPress OneLogin SAML SSO Plugin <= 2.1.8 - Privilege Escalation

This plugin is prone to a privilege escalation vulnerability. Solution Update the plugin...

OneLogin SAML SSO <= 2.1.8 - Provisioned User Hardcoded Password

The OneLogin SAML SSO WordPress plugin was affected by a Provisioned User Hardcoded Password security vulnerability...

myratner.com XSS vulnerability

Vulnerable URL: https://myratner.com/sso/SSOServlet?locale=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5405067 VIP website...

careers.everettclinic.com XSS vulnerability

Vulnerable URL: https://careers.everettclinic.com/sso/SSOServlet?locale=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

azstatejobs.azdoa.gov XSS vulnerability

Vulnerable URL: https://azstatejobs.azdoa.gov/sso/SSOServlet?locale=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check azstatejobs.azdoa.gov SSL connection:|...

sso.amerisourcebergen.com XSS vulnerability

Vulnerable URL: https://sso.amerisourcebergen.com/oaamserver/?app=...

Uber: OneLogin authentication bypass on WordPress sites

First, I'm sorry about reporting another WordPress bug my intention was just to check if WP-OneLogin stores any sensitive info that could be used to attack OneLogin on your other websites. Overview The .uber.com WordPress sites use OneLogin SAML-SSO instead of the normal WordPress login. The...