4843 matches found
RHEL 8 : Red Hat Single Sign-On 7.4.7 security update on RHEL 8 (Moderate) (RHSA-2021:2065)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2065 advisory. Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...
Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update on RHEL 7
New Red Hat Single Sign-On 7.4.7 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update on RHEL 8
New Red Hat Single Sign-On 7.4.7 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update on RHEL 6
New Red Hat Single Sign-On 7.4.7 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Is Single Sign-On Enough to Secure Your SaaS Applications?
If there's one thing all great SaaS platforms share in common, it's their focus on simplifying the lives of their end-users. Removing friction for users in a safe way is the mission of single sign-on SSO providers. With SSO at the helm, users don't have to remember separate passwords for each app...
RHEL 7 : Red Hat Single Sign-On 7.4.7 security update on RHEL 7 (Moderate) (RHSA-2021:2064)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2064 advisory. Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...
RHEL 6 : Red Hat Single Sign-On 7.4.7 security update on RHEL 6 (Moderate) (RHSA-2021:2063)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2063 advisory. Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...
@igames/ghost (>=3.41.6, <=4.0.0-alpha.2), @loftysoul/soul (>=3.0.3-1-soul, <=3.0.16-soul) +8 more potentially affected by CVE-2021-32817 via express-hbs (>=2.0.2, <=2.3.5)
express-hbs NPM version =2.0.2, =3.41.6, =3.0.3-1-soul, =3.0.7, =4.0.4, =1.26.1, =3.17.1, =3.2.1, =0.0.4, =0.1.1-alpha.0 - sign-alex 1.0.1 Source cves: CVE-2021-32817 Source advisory: OSV:GHSA-RWXP-HWWF-653V...
Veeam My Account Sign In FAQ
Below are the most commonly asked questions. Click to expand Which email should I use to log in to the Veeam My Account Portal? You should use your email associated with the company you work with. If you have worked with Veeam Support before, search through your email client to see which email...
PHPFusion < 9.03.100 Multiple Vulnerabilities
PHPFusion is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GitLab Community Edition (CE) 13.10.3 - (Sign_Up) User Enumeration Vulnerability
Exploit Title: GitLab Community Edition CE 13.10.3 - 'SignUp' User Enumeration Exploit Author: @4D0niiS https://github.com/4D0niiS Vendor Homepage: https://gitlab.com/ Version: 13.10.3 Tested on: Kali Linux 2021.1 INFO: An unauthenticated attacker can remotely enumerate the existence of different...
Issues with Storefront Authentication via iFrame on SharePoint - SSO & Username + Password do not work
Authentication works if you connect directly to Storefront but it fails when accessingStorefront via iFrame on Sharepoint, You might encounter these errors when Authenticating: SSO fails with error "Unable to log on with the account that you used to log on to the computer" Manual Username+Passwor...
MTN Group: Email verification bypassed during sing up (https://developers.mtn.com/profile)
Summary: Normally https://developers.mtn.com ask users to verify their email during registration but i found a way to bypass this so than an attacker can create accounts with emails that are not his own abusing the intigrity of MTN. Steps To Reproduce: 1. Create an account with you owned email,...
USN-4925-1: Shibboleth vulnerability
Toni Huttunen and Fraktal Oy discovered that the Shibboleth Service provider allowed content injection due to allowing attacker-controlled parameters in error or other status pages. An attacker could use this to inject malicious content...
CVE-2021-27389
A vulnerability has been identified in Opcenter Quality All versions V12.2, QMS Automotive All versions V12.30. A private sign key is shipped with the product without adequate protection...
CVE-2021-27389
A vulnerability has been identified in Opcenter Quality All versions V12.2, QMS Automotive All versions V12.30. A private sign key is shipped with the product without adequate protection...
Design/Logic Flaw
A vulnerability has been identified in Opcenter Quality All versions V12.2, QMS Automotive All versions V12.30. A private sign key is shipped with the product without adequate protection...
CVE-2021-27389
A vulnerability has been identified in Opcenter Quality All versions V12.2, QMS Automotive All versions V12.30. A private sign key is shipped with the product without adequate protection...
CVE-2021-27389
Opcenter Quality (Siemens) and QMS Automotive are affected by CVE-2021-27389 due to a private signing key shipped with the product without adequate protection. Affected products: Opcenter Quality for all versions < V12.2 and QMS Automotive for all versions