DEBIAN-CVE-2025-11561

A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...

Citrix DaaS: Single sign-on (SSO) not working after enabling FAS

In the DaaS environment, Single sign-onSSO did not work after enabling FAS, and users were prompted to enter credentials. FAS was enabled with Azure AD as IDP in a single-domain environment. Event ID 105, 120 and 121 logged on the FASServer,indicated that the Certificate wasissued by the Windows...

PT-2020-12343

Name of the Vulnerable Software and Affected Versions Nagios XI version 5.6.11 Description The issue allows for XSS via the username parameter in the includes/components/ldap ad integration/ endpoint. Recommendations For Nagios XI version 5.6.11, avoid using the username parameter in the affected...

PT-2020-12344

Name of the Vulnerable Software and Affected Versions Nagios XI version 5.6.11 Description The issue allows for XSS via the password parameter in the includes/components/ldap ad integration/ endpoint. Recommendations For Nagios XI version 5.6.11, avoid using the password parameter in the...

CVE-2016-1402

CVE-2016-1402 describes a denial-of-service vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) for versions prior to 1.2.0.899 patch 7, when AD group-membership authorization is enabled. A remote attacker can trigger an outage by sending a crafted ...