1292 matches found
CVE-2021-28113
CVE-2021-28113: Okta Access Gateway before 2020.9.3 has command-injection in cookieDomain/relayDomain parameters. Requires admin access to the UI and can lead to OS command execution as a privileged system account. No explicit remediation details in provided documents; mode of exploitation (UI-au...
CVE-2021-28113
A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers with admin access to the Okta Access Gateway UI to execute OS commands as a privileged system account...
Okta Access Gateway 操作系统命令注入漏洞
Okta Access Gateway is an application gateway from Okta UK. It addresses this issue by effectively protecting access to local applications on the same platform that protects your cloud applications, infrastructure and APIs. A security vulnerability exists in Okta Access Gateway before 2020.9.3,...
Mattress Firm deployed Azure Active Directory to securely connect Firstline Workers to their SaaS apps and to each other
Today, we have another interesting story for the Voice of the Customer blog series. Tony Miller and Jon Sider of Mattress Firm deployed Azure Active Directory Azure AD to create a secure authentication experience for employees, including their Firstline Workforce. Much like sleep and a good...
Shopify: Unauthenticated access to Zendesk tickets through athena-flex-production.shopifycloud.com Okta bypass
Summary athena-flex-production.shopifycloud.com seems to be an internal system that Shopify uses because it redirects user to Okta login. During this however, I noticed that it first returns 200 and then does a redirect meaning some part of the website loads before redirecting. With this, I was...
Microsoft Flaw Allows Full Multi-Factor Authentication Bypass
A vulnerability in Microsoft’s Active Directory Federation Services ADFS has been uncovered that would allow malicious actors to bypass multi-factor authentication MFA safeguards. Many organizations rely on ADFS to manage identities and resources across their entire enterprise, and ADFS functions...
Configure StoreFront with OKTA
This article illustrates how to configure StoreFront to use OKTA for authentication using SAML metadata exchange...
REST API - Improved HTTP Authentication
h4. Suggestion Description Confluence Server REST API|https://developer.atlassian.com/confdev/confluence-server-rest-api is a simple resource that help administrators to perform operations that would take some time of their day to day activities in a couple seconds, instead of a couple minutes. I...
REST API - Improved HTTP Authentication
h4. Suggestion Description Confluence Server REST API|https://developer.atlassian.com/confdev/confluence-server-rest-api is a simple resource that help administrators to perform operations that would take some time of their day to day activities in a couple seconds, instead of a couple minutes. I...
New Relic: SSO Authentication Bypass
Hi, As I reported to [email protected], here's the authentication bypass vulnerability report. I've left some details out in this report but you're welcome to reach out to me with any questions. Here's a more detailed overview: SSO Authentication Bypass Summary It is possible to POST a custom...
