2267 matches found
Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.2.7 security update on RHEL 6
Security updates for Red Hat Single Sign-On 7.2.7 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.2.7 security update on RHEL 7
Security updates for Red Hat Single Sign-On 7.2.7 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Synology SSO Server Clickjacking Vulnerability
Synology SSO Server is a server software from Synology Inc. of Taiwan, China that provides single sign-on functionality. A security vulnerability exists in the SSOOauth.cgi file in Synology SSO Server versions prior to 2.1.3-0129. A remote attacker can conduct clickjacking attacks via unspecified...
Secure access to your enterprise with Microsoft 365 Enterprise E5
Most lessons in cybersecurity are born out of necessity. In this case, it was my need for a haircut. Last weekend, I was reminded why it’s time to rethink the conventional wisdom about secure passwords and user access. I was making an appointment online and at the very end of the process, the...
Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2018-1902, CVE-2019-4030, CVE-2019-4046)
Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...
PT-2019-8958 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.1-23824 Description: A cross-site scripting XSS issue exists in the Control Panel SSO Settings of Synology DiskStation Manager DSM, allowing remote authenticated users to inject arbitrary...
JFrog Artifactory Pro SAML SSO Signature Verification Error
JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production. JFrog Artifactory Pro SAML SS...
CVE-2019-0275
SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server J2EE-APPS, versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficiently encode user-controlled inputs, which results in cross-site scripting XSS vulnerability...
The vulnerability relates to the implementation of Security Assertion Markup Language (SAML) for single-sign-on authentication in the integrated messaging system Cisco Unity Connection. This vulnerability allows attackers to perform cross-site scripting attacks.
The vulnerability of the Security Assertion Markup Language SAML authentication mechanism for Single Sign-On SSO in the integrated Cisco Unity Connection messaging system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor,...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2018-1996)
Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...
CVE-2019-1685 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability is due to...
Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2019-06586)
Cisco Unity Connection UC is a set of voice messaging platforms from the U.S. company Cisco Cisco. The platform can use voice commands to make calls or listen to messages hands-free. A cross-site scripting vulnerability exists in the Security Assertion Markup Language single sign-on interface in...
Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability is due to...
PT-2019-1501 · Cisco · Cisco Unity Connection
Name of the Vulnerable Software and Affected Versions: Cisco Unity Connection version 12.5 Description: A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against ...
Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.2.6 security update
A security update is now available for Red Hat Single Sign-On 7.2 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2018-10237)
Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...
Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On
Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...
Fortnite Flaws Allowed Hackers to Takeover Gamers' Accounts
Check Point researchers have discovered multiple security vulnerabilities in Fortnite, a massively popular online battle game, one of which could have allowed remote attackers to completely takeover player accounts just by tricking users into clicking an unsuspectable link. The reported Fortnite...
