CVE-2024-20915

CVE-2024-20915 affects Oracle E-Business Suite’s Oracle Application Object Library (AOL), Login - SSO component. Affected: AOL in E-Business Suite versions 12.2.3–12.2.13. Issue: insufficient input validation in the Login - SSO path allows an unauthenticated, network-accessible attacker (via HTTP...

CVE-2024-20915: Inconsistent Interpretation of HTTP Requests

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login - SSO. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

CVE-2024-21401 Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

...

com.bluefirereader:sso-user (>=1.0.0, <=1.2.13), com.intropro:b-test (>=1.0.2, <=1.0.10) +3 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (2.26)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.26 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.bluefirereader:sso-user =1.0.0, =1.0.2, =1.0.10 - com.nimbusds:oauth2-oidc-sdk 3.3 -...

DEBIAN-CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

Open redirect

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

Glewlwyd SSO server input validation error vulnerability

The Glewlwyd SSO server is a single sign-on SSO server for multi-factor authentication for OAuth2 and OpenID Connect authentication. An input validation error vulnerability exists in Glewlwyd SSO server versions 2.x through 2.7.6, which stems from an open redirection vulnerability in the componen...

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715: URL Redirection to Untrusted Site

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

CVE-2024-25715

Summary: CVE-2024-25715 affects Glewlwyd SSO server 2.x up to 2.7.6, with an open redirection vulnerability exploitable via the redirect_uri parameter. The connected sources confirm the affected software and request a mitigation or patch, but do not provide a specific fixed version. The root caus...

PT-2024-21110

Name of the Vulnerable Software and Affected Versions Glewlwyd SSO server versions 2.x through 2.7.6 Description The issue allows open redirection via the redirect uri. This could potentially be exploited to redirect users to malicious websites. Recommendations For versions 2.x through 2.7.6,...

[SECURITY] Fedora 38 Update: freeipa-4.10.3-1.fc38

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

Fedora: Security Advisory for freeipa (FEDORA-2024-403145c4fb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM OpenPages Is Vulnerable to Privilege Escalation attack (CVE-2023-38738)

Summary IBM OpenPages with Watson is affected by unauthorized account access due to Native authentication method. This vulnerability is addressed. Vulnerability Details CVEID:CVE-2023-38738 DESCRIPTION: IBM OpenPages could provide weaker than expected security in a OpenPages environment using...