775 matches found
IBM WebSphere Application Server 8.0.0.10 < 8.0.0.14 / 8.5.5.3 < 8.5.5.12 / 9.0.0.0 < 9.0.0.4 OIDC Privilege Escalation
The IBM WebSphere Application Server running on the remote host is version 8.0.0.10 prior to 8.0.0.14, 8.5.5.3 prior to 8.5.5.12, or 9.0.0.0 prior to 9.0.0.4. It is, therefore, affected by a privilege escalation vulnerability in the OpenID Connect OIDC Trust Association Interceptor TAI that is...
CVE-2017-1151
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect OIDC configured with a Trust Association Interceptor TAI could allow a user to gain elevated privileges on the system. IBM Reference : 1999293...
CVE-2017-1151
CVE-2017-1151 is an IBM WebSphere Application Server privilege-escalation vulnerability. It occurs when OpenID Connect (OIDC) is configured with a Trust Association Interceptor (TAI); under this configuration a user could gain elevated privileges on the system. Affected products/versions in the c...
DEBIAN-CVE-2017-6413
The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" aka modauthopenidc module before 2.1.6 for the Apache HTTP Server does not skip OIDCCLAIM and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP...
flask-oidc open redirect vulnerability
flask-oidc is a library for supporting OpenID connections to flask. An open redirection vulnerability exists in flask-oidc 0.1.2 and earlier versions, which can be exploited by an attacker to redirect a user to an arbitrary website and execute a phishing attack...
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
PYSEC-2016-25
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
Open redirect
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
PYSEC-2016-25
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
The CVE-2016-1000001 entry concerns the flask-oidc library, where versions 0.1.2 and earlier are vulnerable to an open redirect. The vulnerability enables a misused redirect to an arbitrary URL, potentially facilitating phishing or credential-stealing scenarios for users who interact with a craft...
CVE-2016-0283
CVE-2016-0283 affects IBM WebSphere Application Server Liberty Profile 8.5.5 before 8.5.5.9. The OpenID Connect (OIDC) client web application is vulnerable to cross-site scripting (XSS) via a crafted URL, enabling a remote attacker to inject web script or HTML in the victim’s browser. Impact per ...
