CVE-2013-4820

HP IceWall SSO and related components (IceWall SSO 8.0–10.0, IceWall SSO Agent Option, Smart Device Option, SAML2 and JAVA Agent Library, IceWall Federation Agent, and IceWall File Manager 3.0–SP4) contain an unspecified vulnerability that allows remote authenticated users to obtain sensitive inf...

Oracle E-Business Suite password disclosure vulnerability

Overview Oracle E-Business Suite 12.0-12.1, when used with the native login pages or single sign-on SSO / Oracle Access Management OAM with the native login pages, contains a credential exposure vulnerability. Description Oracle E-Business Suite administrators who have applied CPU patches for Jul...

CVE-2013-3755

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 allows remote attackers to affect integrity via vectors related to SSO Engine...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 allows remote attackers to affect integrity via vectors related to SSO Engine...

CVE-2013-3755

Technical details for CVE-2013-3755 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-3755

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 allows remote attackers to affect integrity via vectors related to SSO Engine...

[security bulletin] HPSBHF02885 rev.1 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03787836 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03787836 Version: 1 HPSBHF02885 rev....

HP Integrated Lights-Out unauthorized access

Unauthorized access if SSO is configured...

CVE-2013-2338

HP iLO3 and iLO4 remote code execution (CVE-2013-2338) affects iLO3 firmware prior to 1.57 and iLO4 firmware prior to 1.22 when Single-Sign-On is enabled. The vulnerability, described as an unspecified remote code execution via unknown vectors, has a CVSS v2 base score of 9.3 (HIGH) and requires ...

CVE-2013-3502

monarchscan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie...

Command injection

monarchscan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie...

CVE-2013-3502

monarchscan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie...

CVE-2013-3502

GroundWork Monitor Enterprise 6.7.0 is affected by CVE-2013-3502 via monarch_scan.cgi. The root cause is untrusted user input used in a Perl function (qx), enabling remote authenticated attackers to inject commands and achieve arbitrary code execution and potential data exposure. A Metasploit mod...

CVE-2011-4408

The Single Sign On Client ubuntu-sso-client for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle MITM attack...

CVE-2011-4408

CVE-2011-4408 affects the Ubuntu Single Sign On Client (ubuntu-sso-client) on Ubuntu 11.04 and 11.10. The issue is that SSL certificates were not properly validated over HTTPS, enabling remote attackers to perform MITM attacks to spoof a server and read or modify sensitive data. Public references...

Ubuntu Update for ubuntu-sso-client USN-1464-1

Ubuntu Update for Linux kernel vulnerabilities USN-1464-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14641.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ubuntu-sso-client USN-1464-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1464-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.04 / 11.10 : ubuntu-sso-client vulnerability (USN-1464-1)

It was discovered that the Ubuntu Single Sign On Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information. Note that Tenable...

CVE-2012-1256

The single sign-on SSO implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified urlaccount parameter, in conjunction with a valid login name in the SSPIHEADER parameter, to index.php...

Authentication flaw

The single sign-on SSO implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified urlaccount parameter, in conjunction with a valid login name in the SSPIHEADER parameter, to index.php...