1182 matches found
Design/Logic Flaw
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...
CVE-2023-45129
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...
CVE-2023-45129 matrix-synapse vulnerable to denial of service due to malicious server ACL events
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...
Security Bulletin: IBM® Db2® is vulnerable to information disclosure due to improper privilege management when certain federation features are used. (CVE-2023-29256)
Summary IBM® Db2® is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. Vulnerability Details CVEID:CVE-2023-29256 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to an information...
CVE-2023-41317
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when GraphQL Subscriptions are...
The vulnerabilities of the federation components and the RabbitMQ messaging broker allow attackers to compromise data integrity.
The vulnerability of the federation components and the RabbitMQ messaging broker components is related to the improper implementation of user input processing. Exploiting this vulnerability allows an attacker to compromise data integrity...
SAML Metadata Import Errors when Federation Metadata XML file is larger than 64KB
The following messages are observed at the logs: Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903432 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903433 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903434...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a hacker to bypass existing security restrictions.
The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
CVE-2023-37471
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-...
Authentication flaw
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-...
CVE-2023-37471
OpenAM up to version 14.7.2 is vulnerable to user impersonation due to improper validation of SAML responses in SAMLv1.x SSO. An attacker can impersonate any OpenAM user (including admin) by sending a crafted SAML response to the SAMLPOSTProfileServlet. A fix is available in OpenAM 14.7.3-SNAPSHO...
CVE-2023-37471 User impersonation using SAMLv1.x SSO in Open Access Management
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to circumvent security restrictions.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
CVE-2023-35348
Active Directory Federation Service Security Feature Bypass Vulnerability...
CVE-2023-35348
Active Directory Federation Service Security Feature Bypass Vulnerability...
Security feature bypass
Active Directory Federation Service Security Feature Bypass Vulnerability...
CVE-2023-35348 Active Directory Federation Service Security Feature Bypass Vulnerability
...
CVE-2023-35348
Public technical details about CVE-2023-35348 (Active Directory Federation Service Security Feature Bypass) are not provided in the connected documents. Currently, only high-level descriptions and mappings exist. Monitor for official advisories and published fixes for specifics.
