Important: Red Hat Security Advisory: Red Hat Single Sign-On Node.js adapter security update

An update to the Node.js adapter for Red Hat Single Sign-On 7.1 is now available from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 6

Red Hat Single Sign-On 7.1 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 7

Red Hat Single Sign-On 7.1 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update

Red Hat Single Sign-On 7.1 is now available for download from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

How to Configure NetScaler as IDP for SAML Based Integration with 15Five

This article describes how to configure NetScaler as an Identity Service Provider IDP for 15Five SaaS applications, using SAML Security Assertion Markup Language protocol. Introduction 15Five is a company that provides performance management platform that combines employee feedback, objectives...

How does LDAP Authentication work with Kerberos Impersonation SSO?

How does LDAP Authentication work with Single Sign On using Kerberos Impersonation? In this flow, the NetScaler is contacting the KDC after we purged tickets on the KDC, and the NetScaler. 1. The client makes a GET request to the LB vServer. 2. The LB vServer is configured with Form-based...

How to configure Pass-Through authentication for Storefront with Internet Explorer

This article describes how to configure Single Sign-on authentication to XenApp/XenDesktop using Internet Explorer. After configuring Single Sign-on, users will be able to connect to their Storefront published applications and launch XenApp/XenDesktop sessions without having to enter their...

CVE-2016-2908

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...

Xxe

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...

CVE-2016-2908

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...

CVE-2016-2908

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...

CVE-2016-2908

CVE-2016-2908 is a XML External Entity (XXE) vulnerability affecting IBM Security products. IBM security advisories and IBM/Tivoli bulletins show that the flaw arises from XML parsing in affected components, enabling a remote attacker to read arbitrary files or cause a denial of service. Affected...

PT-2017-8266

Name of the Vulnerable Software and Affected Versions IBM Single Sign On for Bluemix affected versions not specified Description The issue is caused by a XML external entity XXE error when processing XML data by the XML parser, allowing a remote attacker to obtain sensitive information. This coul...

CVE-2016-2908: Improper Restriction of XML External Entity Reference

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity XXE error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service...

CVE-2016-7460: Improper Restriction of XML External Entity Reference

The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity...

[SECURITY] Fedora 24 Update: ipsilon-2.0.2-2.fc24

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

[SECURITY] Fedora 25 Update: ipsilon-2.0.2-2.fc25

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

Important: Red Hat Security Advisory: Red Hat Single Sign-On security update

A security update is now available for Red Hat Single Sign-On 7.0 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

VMware vCenter Server 5.5.x < 5.5u3e / 6.0.x < 6.0u2a Multiple XXE Vulnerabilities (VMSA-2016-0022)

The version of VMware vCenter Server installed on the remote host is 5.5.x prior to 5.5u3e or 6.0.x prior to 6.0u2a. It is, therefore, affected by multiple XML external entity XXE vulnerabilities : - Multiple XML external entity XXE vulnerabilities exist in the Log Browser, the Distributed Switch...

Ipsilon Denial of Service Vulnerability

Ipsilon is a server and toolkit for configuring Apache-based service providers to provide federated authentication SSO to web applications with pluggable standalone modwsgi applications. A denial of service vulnerability exists in Ipsilon that can be exploited by an attacker to cause a denial of...