2990 matches found
CVE-2019-13497
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...
CVE-2019-13497
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...
Cross site request forgery (csrf)
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...
CVE-2019-13497
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...
CVE-2019-13497: Cross-Site Request Forgery (CSRF)
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...
PT-2019-13370
Name of the Vulnerable Software and Affected Versions One Identity Cloud Access Manager versions prior to 8.1.4 Hotfix 1 Description The issue allows for Cross-Site Request Forgery CSRF attacks on logout requests. Recommendations For versions prior to 8.1.4 Hotfix 1, update to version 8.1.4 Hotfi...
Exploit for Cross-Site Request Forgery (CSRF) in Oneidentity Cloud_Access_Manager
CVE-2019-13497 Exploit Title: Cross Site Request Forgery CSR...
CVE-2018-14658
A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack...
CVE-2019-14826
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session...
CVE-2019-14826
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session...
DEBIAN-CVE-2019-14826
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session...
UBUNTU-CVE-2019-14826
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session...
CVE-2019-0352
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages like jsp are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout...
CVE-2019-3754
Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could...
PT-2019-16694
Name of the Vulnerable Software and Affected Versions Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116 Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 Dell EMC VNXe3200 versions prior to 3.1.10.9946299 Description The issue is related to a reflected cross-site scripting...
CVE-2019-3754: Improper Neutralization of Input During Web Page Generation
Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could...
CVE-2019-15820
The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmisavesettings authentication...
CVE-2019-15820
The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmisavesettings authentication...
PT-2019-14409
Name of the Vulnerable Software and Affected Versions login-or-logout-menu-item plugin versions prior to 1.2.0 Description The issue concerns a lack of authentication requirement for lolmi save settings, potentially allowing unauthorized access. Recommendations For versions prior to 1.2.0, update...