CVE-2019-13483

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

@sysdoc/sysdoc-web-stack (1.0.0), open-stack (>=1.1.0, <=1.2.7) potentially affected by CVE-2019-13483 via passport-sharepoint (0.2.12)

passport-sharepoint NPM version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on passport-sharepoint and may be impacted: - @sysdoc/sysdoc-web-stack 1.0.0 - open-stack =1.1.0, =1.2.7 Source cves: CVE-2019-13483 Source advisory: GHSA-45FH-G845-PJ9...

GHSA-45FH-G845-PJ9W Auth0 Passport-SharePoint does not validate JWT signature

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

@sysdoc/sysdoc-web-stack (1.0.0), open-stack (>=1.1.0, <=1.2.7) potentially affected by CVE-2019-13483 via passport-sharepoint (0.2.12)

passport-sharepoint NPM version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on passport-sharepoint and may be impacted: - @sysdoc/sysdoc-web-stack 1.0.0 - open-stack =1.1.0, =1.2.7 Source cves: CVE-2019-13483 Source advisory:...

Auth0 Passport-SharePoint does not validate JWT signature

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

CVE-2019-13483

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

CVE-2019-13483

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

Authentication flaw

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

CVE-2019-13483

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

CVE-2019-13483

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

CVE-2019-13483

CVE-2019-13483 affects the Auth0 Passport-SharePoint package (before version 0.4.0). The root cause is that the implementation does not validate the JWT signature of an Access Token before processing, enabling attackers to forge tokens and bypass authentication and authorization mechanisms. The p...

CVE-2019-13483: Insufficient Verification of Data Authenticity

Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mechanisms...

PT-2019-13361

Name of the Vulnerable Software and Affected Versions Auth0 Passport-SharePoint versions prior to 0.4.0 Description The issue allows attackers to forge tokens and bypass authentication and authorization mechanisms due to the lack of validation of the JWT signature of an Access Token before...