CVE-2025-0663

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

CVE-2025-0663

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

CVE-2025-0663

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

CVE-2025-0663 Potential cross-tenant account takeover vulnerability in Multiple WSO2 Products via Adaptive Authentication and Auto-Login

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

CVE-2025-0663 Potential cross-tenant account takeover vulnerability in Multiple WSO2 Products via Adaptive Authentication and Auto-Login

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

CVE-2025-0663

Summary: CVE-2025-0663 describes a cross-tenant authentication vulnerability in multiple WSO2 products due to a single cryptographic key used across all tenants to sign authentication cookies in Adaptive Authentication. This design flaw can allow a privileged user in one tenant to forge cookies f...

WSO2 Identity Server 安全漏洞

WSO2 Identity Server IS is an identity server from the US-based WSO2 Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improper cryptographic design in adaptive authentication, which could lead to a cross-tenant authentication vulnerability...

Addressing Weak Authentication like RFID, NFC in EVs and EVCs Using AI-Powered Adaptive Authentication

The rapid expansion of the Electric Vehicles EVs and Electric Vehicle Charging Systems EVCs has introduced new cybersecurity challenges, specifically in authentication protocols that protect vehicles, users, and energy infrastructure. Although widely adopted for convenience, traditional...

Fedora: Security Advisory (FEDORA-2024-7bc1df53fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Support for Tunneling Syslog to On Premise Datacenter when using Adaptive Authentication on Cloud

Configure external syslog server when using Adaptive Authentication on Cloud...

Fedora: Security Advisory (FEDORA-2024-d0a6c4ac13)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : lemonldap-ng (2024-7bc1df53fc)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7bc1df53fc advisory. Update to lemonldap-ng 2.20.1: - Security Adaptative Authentication Rules triggered by Refresh my rights - Security XSS in upgradeSession / forceUpgrade page...

DEBIAN-CVE-2024-52946

An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh allows an authenticated user to raise their authentication level if the admin configured an "Adaptative authentication rule" with an increment instead of an absolute value...

Syslog not being sent to external syslog server from Citrix Cloud Gateway Service (Adaptive Auth)

Configure external syslog server when using Cloud Gateway as a Service for Adaptive Authentication...

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518

A vulnerability has been discovered in Citrix Gateway and Citrix ADC, listed below, that, if exploited, could allow an unauthenticated remote attacker to perform arbitrary code execution on the appliance. CVE-ID| Description| CWE| Affected Products| Pre-conditions ---|---|---|---|---...

CVE-2017-4978

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

Cross site scripting

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-4978

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-4978

EMC RSA Adaptive Authentication (On-Premise) contains a cross-site scripting vulnerability in versions prior to 7.3 P2. The issue affects the product’s web interface, enabling an attacker to potentially access a user’s cookies (including authentication cookies) and compromise the target user sess...

CVE-2017-4978

EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...