525 matches found
CVE-2022-24129
The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery SSRF due to insufficient restriction of the requesturi parameter. This allows attackers to interact with arbitrary third-party HTTP services...
Server side request forgery (ssrf)
The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery SSRF due to insufficient restriction of the requesturi parameter. This allows attackers to interact with arbitrary third-party HTTP services...
CVE-2022-24129
The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery SSRF due to insufficient restriction of the requesturi parameter. This allows attackers to interact with arbitrary third-party HTTP services...
CVE-2022-24129
The vulnerability CVE-2022-24129 affects the Shibboleth Identity Provider OIDC OP plugin before version 3.0.4. Root cause: insufficient restriction of the request_uri parameter enables server-side request forgery (SSRF), allowing interaction with arbitrary third-party HTTP services. Impact is SSR...
Shibboleth 代码问题漏洞
Shibboleth is an open source SAML-based Web single sign-on system for Windows platforms from Shibboleth, UK. A security vulnerability exists in the Shibboleth Identity Provider, which stems from an under-restricted requesturi parameter, in the OIDC OP plugin for the Shibboleth Identity Provider...
CVE-2021-40691
A session hijack risk was identified in the Shibboleth authentication plugin...
CVE-2021-40691
CVE-2021-40691 is a session-hijack risk identified in the Shibboleth authentication plugin, reported in the Moodle ecosystem. The base CVSSv3.1 score from NVD is 4.3 (Medium) with Network attack vector, low attack complexity, no privileges required, but user interaction is required and impact is ...
PT-2022-11300 · Shibboleth +1 · Shibboleth Authentication Plugin +1
Name of the Vulnerable Software and Affected Versions: Shibboleth authentication plugin affected versions not specified Description: A session hijack risk was identified in the Shibboleth authentication plugin. Recommendations: At the moment, there is no information about a newer version that...
openSUSE: Security Advisory for shibboleth-sp (openSUSE-SU-2021:3244-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2021:3244-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : shibboleth-sp (SUSE-SU-2021:3244-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:3244-1 advisory. - Template generation allows external parameters to override placeholders bsc1184222 Tenable has extracted the preceding description block directly fro...
openSUSE 15 Security Update : shibboleth-sp (openSUSE-SU-2021:3244-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3244-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...
OPENSUSE-SU-2021:3244-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issues: - Template generation allows external parameters to override placeholders bsc1184222...
SUSE-SU-2021:3244-1 Security update for shibboleth-sp
This update for shibboleth-sp fixes the following issues: - Template generation allows external parameters to override placeholders bsc1184222...
Security update for shibboleth-sp (low)
openSUSE Security Update: Security update for shibboleth-sp Announcement ID: openSUSE-SU-2021:3244-1 Rating: low References: 1184222 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for shibboleth-sp fixes the following...
Moodle Shibboleth 授权问题漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment.Shibboleth is an open source SAML protocol web single sign-on system for Windows platforms from Shibboleth, UK. Moodle suffers from an...
The vulnerability of the session restoration function of the Shibboleth Service Provider’s authentication component, related to the manipulation of the zero pointer, allows a perpetrator to trigger a service failure.
The vulnerability of the session restoration function of the Shibboleth Service Provider component is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using a specially created cookie file...
Moodle 代码注入漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from a code injection vulnerability that stems from incorrect input validation of the Shibboleth authentication plugin....
PT-2021-3683 · Unknown +2 · Shibboleth +2
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A remote code execution risk was identified in the Shibboleth authentication plugin of Moodle. The issue is related to incorrect code generation management. An attacker can exploit this issu...
SUSE: Security Advisory (SUSE-SU-2019:3386-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...