CVE-2017-8041

CVE-2017-8041 affects Pivotal Cloud Foundry’s Single Sign-On (PCF SSO). The vulnerability is a cross-site scripting flaw in the org-name field on certain SSO UI pages, exploitable in PCF SSO versions 1.3.x before 1.3.4 and 1.4.x before 1.4.3. The described impact is that a remote attacker can cau...

CVE-2017-8040

CVE-2017-8040 affects Pivotal Cloud Foundry (PCF) Single Sign-On: XXE vulnerability in the SSO dashboard. Versions 1.3.x before 1.3.4 and 1.4.x before 1.4.3 are vulnerable; privileged users can upload malformed XML, potentially exposing data on the SSO service broker filesystem. Root cause is XML...

CVE-2017-8040

In Single Sign-On for Pivotal Cloud Foundry PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE XML External Entity attack was discovered in the Single Sign-On service dashboard. Privileged users can in some cases upload malformed XML leading to exposure of data on the...

Mautic SSO/OAuth2 Plugin Cross-Site Request Forgery Vulnerability

Mautic is an open source marketing automation management software developed and maintained by the Mautic community. The software has features such as monitoring websites, creating web pages and sending emails.Mautic SSO/OAuth2 is one of the single sign-on plug-ins based on the OAuth2 a secure log...

Netscaler - 11.1 - SSO Failure with RDP Proxy

1. When connecting to RDP via NS gateway CVPN bookmarks, the RDP window terminates with error An Internal error has occurred. 2. Netscaler resets the back-end connection withreset code of 9952 dropping connection due to SSL received fatal alert 3. Disabled SSO using...

[SECURITY] Fedora 26 Update: heimdal-7.4.0-1.fc26

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

OneLogin Breach Compromised Customer Data, Ability to Decrypt Encrypted Data

A breach at OneLogin, a company that provides customers with a single sign on for logging into multiple sites and apps, appears to have compromised customer data, including the ability to decrypt encrypted data. The company notified customers via email Wednesday that the incident stemmed from...

Creating a Seamless User Experience with XenMobile Email Enrollment for Secure Mail SSO

With the recent Secure Mail update, you can now configure Citrix Secure Mail to provide single sign-on SSO for users through the use of an automatic provisioning mechanism during your first-time use. Secure Mail consumes the user credentials that users enter to authenticate to Secure Hub to...

SAP Netweaver Authentication and SSO Cross-Site Scripting Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP Netweaver authentication and SSO due to the program not...

How to Disable Single Sign-On in NetScaler

This article describes how to disable Single Sign-On in NetScaler. Background In XenMobile, in some use cases the app may want to perform NTLM authentication of a user that was not used during enrollment. In such situation, the app uses Full Tunnel mode and so would like to send the credentials...

Important: Red Hat Security Advisory: Red Hat Single Sign-On Node.js adapter security update

An update to the Node.js adapter for Red Hat Single Sign-On 7.1 is now available from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 6

Red Hat Single Sign-On 7.1 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 7

Red Hat Single Sign-On 7.1 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update

Red Hat Single Sign-On 7.1 is now available for download from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

How to Configure NetScaler as IDP for SAML Based Integration with 15Five

This article describes how to configure NetScaler as an Identity Service Provider IDP for 15Five SaaS applications, using SAML Security Assertion Markup Language protocol. Introduction 15Five is a company that provides performance management platform that combines employee feedback, objectives...

How does LDAP Authentication work with Kerberos Impersonation SSO?

How does LDAP Authentication work with Single Sign On using Kerberos Impersonation? In this flow, the NetScaler is contacting the KDC after we purged tickets on the KDC, and the NetScaler. 1. The client makes a GET request to the LB vServer. 2. The LB vServer is configured with Form-based...

How to configure Pass-Through authentication for Storefront with Internet Explorer

This article describes how to configure Single Sign-on authentication to XenApp/XenDesktop using Internet Explorer. After configuring Single Sign-on, users will be able to connect to their Storefront published applications and launch XenApp/XenDesktop sessions without having to enter their...

CVE-2016-2908

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...

Xxe

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...

CVE-2016-2908

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...