184 matches found
KLA11644 An information disclosure vulnerability in Microsoft Downloads
An information disclosure vulnerability was found in Microsoft Downloads. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2019-1487 Exploitation Related products Microsoft-Authentification-Library-for-Android CVE list CVE-2019-1487 warning K...
PT-2019-4161
Name of the Vulnerable Software and Affected Versions Microsoft Authentication Library MSAL for Android versions 0.3.1-Alpha and later Description The issue is related to an information disclosure vulnerability in the Microsoft Authentication Library MSAL for Android. It is associated with a lack...
CVE-2019-1487: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability in Android Apps using Microsoft Authentication Library MSAL 0.3.1-Alpha or later exists under specific conditions, aka 'Microsoft Authentication Library for Android Information Disclosure Vulnerability'...
Microsoft Authentication Library CVE-2019-1487 Information Disclosure Vulnerability
Description Microsoft Authentication Library is prone to a information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Authentication Library 0.3.1-Alpha Recommendations Block external...
Libntlm Buffer Overflow Vulnerability
Libntlm is an NTLM NT LAN Manager authentication library. A buffer overflow vulnerability exists in Libntlm 1.5 and earlier versions, which can be exploited by an attacker to cause a buffer overflow or heap overflow, among other things...
CVE-2019-1258
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated attacker to perform actions in context of another user. The authenticated attacker can exploit this...
Privilege escalation
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka 'Azure Active Directory Authentication Library Elevation of Privilege Vulnerability'...
CVE-2019-1258
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated attacker to perform actions in context of another user. The authenticated attacker can exploit this...
CVE-2019-1258 Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
...
CVE-2019-1258: Undefined Security Weakness
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated attacker to perform actions in context of another user. The authenticated attacker can exploit this...
Microsoft Azure Active Directory Authentication Library Elevation of Privilege Vulnerability
Microsoft Azure Active Directory Authentication Library is an authentication library from Microsoft Corporation USA. This product allows client applications to authenticate users. An elevation of privilege vulnerability exists in On-Behalf-Of flow in the Azure Active Directory Authentication...
@cimpress/simple-auth-wrapper (>=2.2.0, <=2.2.3), @expo/auth0-lock (10.16.0) +18 more potentially affected by CVE-2017-17068 via auth0-js (>=8.0.0-beta.1, <=8.11.3)
auth0-js NPM version =8.0.0-beta.1, =2.2.0, =1.1.0, =1.1.0, =1.1.0, =1.0.0, =0.0.18, =1.5.0, =0.0.1, =10.8.0-beta.2, =1.0.8, =1.0.15 - ds-auth0-lock 1.0.0 and more Source cves: CVE-2017-17068 Source advisory: OSV:GHSA-3RPR-MG43-XHQ4...
Description of the security update for Outlook 2016: September 12, 2017
None None...
CVE-2017-7696
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service memory consumption via large values in the width and height parameters to otplogonuiresources/qr, aka SAP Security Note 2389042...
CVE-2017-7696: Allocation of Resources Without Limits or Throttling
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service memory consumption via large values in the width and height parameters to otplogonuiresources/qr, aka SAP Security Note 2389042...
PT-2017-17894
Name of the Vulnerable Software and Affected Versions SAP AS JAVA SSO Authentication Library versions 2.0 through 3.0 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by providing large values in the width and height parameters to the "o...
[SECURITY] Fedora 25 Update: canl-c-2.1.8-1.fc25
This is the C part of the EMI caNl -- the Common Authentication Library...
[SECURITY] Fedora 23 Update: canl-c-2.1.7-1.fc23
This is the C part of the EMI caNl -- the Common Authentication Library...