CVE-2015-4912

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine...

Vulnerability in Oracle Fusion Middleware Oracle Access Manager Component

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation that provides middleware, software collections, and other capabilities.Oracle Access Manager is one of the components that provides identity...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine...

CVE-2015-4912

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine...

CVE-2015-4912

CVE-2015-4912 affects Oracle Fusion Middleware Oracle Access Manager (OAM) 11.1.2.2 and 11.1.2.3, specifically the SSO Engine subcomponent. The vulnerability is described as an unspecified flaw that could allow remote attackers to compromise confidentiality via the SSO Engine, indicating an infor...

CVE-2015-4912: Undefined Security Weakness

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine...

PT-2015-2467

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.2.2 through 11.1.2.3 Description The issue is related to errors in the code of the Oracle Access Manager component, which can be exploited by a remote attacker to gain unauthorized read access to data. Th...

Oracle Access Manager Information Disclosure (October 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by an information disclosure vulnerability due to an unspecified flaw in the SSO Engine subcomponent. An unauthenticated, remote attacker can exploit this to disclose sensitive information. %NASLMINLEVEL 70300 C Tenable...

BlackHat topics: SMBS not only to share your files-bug warning-the black bar safety net

In this paper, we show a new attack method to crack the Windows SSO Single Sign On feature, affecting all versions of Windows including the latest Windows 10, Microsoft's SMB（Server Message Block Protocol, within the network to attack the SMB technology has appear a long time, this new type of...

HP System Management Homepage Single Sign On Parameter Handling RCE

Binary data hpsmhzdi-15-262.nbin...

校园卡电子服务平台卡号查询功能未授权访问

管理员查询用户姓名、卡号的功能可未授权访问，导致攻击者可通过遍历卡号的方式获取所有用户姓名、卡号信息，关键问题是，这个校园卡服务平台的卡号默认口令为888888，部分用户可能未修改默认口令，导致攻击者获取卡号信息后，可尝试使用默认口令登录，且此平台涉及在线支付功能，与此平台可SSO登录，因此可能影响用户校园卡账户资金。谷歌关键词：校园卡电子服务平台，可获得以下用户存在此问题。山东大学：http://card.sdu.edu.cn/Account/SearchUserInfo中国石油大学：http://card.upc.edu.cn/Account/SearchUserInfo河北工业大学...

Acunetix v10 - Web Application Security Testing Tool

Acunetix, the pioneer in automated web application security software, has announced the release of version 10 of its Vulnerability Scanner. New features are designed to prevent the risk of hacking for all customers; from small businesses up to large enterprises, including WordPress users, web...

KLA10493 Code execution vulnerability in Fortinet SSO

Stack based buffer overflow was found in FSSO. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message. Original advisories Fortinet advisory Exploitation Public exploits exist for this vulnerabilit...

CVE-2015-2215

Open redirect vulnerability in the Services single sign-on server helper servicesssoserverhelper module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...

SA-CONTRIB-2015-055 - Services single sign-on server helper - Open Redirect - Unsupported

Services single sign-on server helper module provides functionality to facilitate account information editing on a remote SSO site. The module doesn't validate some user supplied URLs in parameters used for page redirection. An attacker could trick users to visit malicious sites without realizing...

Crucible does not clear all Tokens when Browser is Closed

Problem Closing a browser ends the user session. When the user re-opens the browser and accesses Crucible, there is no login prompt and Crucible treats it like an authenticated user. Any page loads after the initial will result in the user being directed to the login page. Steps to Reproduce Have...

Unspecified Vulnerability in Oracle Access Manager SSO Engine Subpart (CNVD-2015-00525)

Oracle Access Manager is security infrastructure software that helps organizations manage secure access to enterprise Web applications within and across the business-to-business B2B value chain. A security vulnerability in the Oracle Access Manager SSO Engine child allows remote attackers to...

CVE-2015-0367

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine...

CVE-2015-0367

CVE-2015-0367 concerns an unspecified vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 that could affect integrity via vectors related to the SSO Engine. The connected documents corroborate this CVE in the context of Oracl...