525 matches found
Shibboleth Service Provider Denial of Service Vulnerability
Shibboleth is the British Shibboleth Group of a set of open source based on the SAML protocol of the Web single sign-on system . Shibboleth Service Provider SP is one of the service provider . A security vulnerability exists in Shibboleth SP versions prior to 2.5.4. The vulnerability can be...
CVE-2015-2684
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
Code injection
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
CVE-2015-2684
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
UBUNTU-CVE-2015-2684
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
CVE-2015-2684
CVE-2015-2684 affects the Shibboleth Service Provider (SP) prior to version 2.5.4. It allows a remote authenticated attacker to cause a denial of service (crash) by sending crafted SAML messages; multiple sources confirm a fix involves upgrading/shifting to newer SP releases (e.g., 2.5.4+ and rel...
CVE-2015-2684
Shibboleth Service Provider SP before 2.5.4 allows remote authenticated users to cause a denial of service crash via a crafted SAML message...
CVE-2015-2684
Removed by vendor...
KLA10521 Denial of service vulnerability in Shibboleth SP
An unspecified vulnerability was found in Shibboleth SP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed SAML message. Original advisories Shibboleth advisory Related products...
Debian DSA-3207-1 : shibboleth-sp2 - security update
A denial of service vulnerability was found in the Shibboleth an federated identity framework Service Provider. When processing certain malformed SAML message generated by an authenticated attacker, the daemon could crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
[SECURITY] [DSA 3207-1] shibboleth-sp2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3207-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 28, 2015 http://www.debian.org/security/faq -...
DSA-3207-1 shibboleth-sp2 - security update
Bulletin has no description...
Debian Security Advisory DSA 3207-1 (shibboleth-sp2 - security update)
A denial of service vulnerability was found in the Shibboleth an federated identity framework Service Provider. When processing certain malformed SAML message generated by an authenticated attacker, the daemon could crash. OpenVAS Vulnerability Test $Id: deb3207.nasl 6609 2017-07-07 12:05:59Z...
Debian: Security Advisory (DSA-3207-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moodle Shibboleth Validation Plugin Force Quit Vulnerability
Moodle is an open source web-based teaching and learning application. A security vulnerability exists in Moodle multimedia that allows attackers to exploit this vulnerability to force a user to log out via the Shibboleth authentication plugin...
SA-CONTRIB-2015-028 - Shibboleth Authentication - Cross Site Request Forgery (CSRF)
Shibboleth Authentication module allows users to log in and get permissions based on federated SAML2 authentication. The roles that are assigned to users are based on a matching list. A malicious attacker can delete matching rules from the list by getting the administrator's browser to make a...
MGASA-2015-0032 Updated moodle package fixes security vulnerabilities
Updated moodle package fixes security vulnerabilities: In Moodle before 2.6.7, absence of a capability check in AJAX backend script in the LTI module could allow any enrolled user to search the list of registered tools CVE-2015-0211. In Moodle before 2.6.7, the course summary on course request...
CVE-2014-3552
The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a session ID is empty, which allows remote authenticated users to hijack sessions via crafted plugin interaction...
CVE-2014-3552
The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a session ID is empty, which allows remote authenticated users to hijack sessions via crafted plugin interaction...
Authentication flaw
The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a session ID is empty, which allows remote authenticated users to hijack sessions via crafted plugin interaction...