4843 matches found
Github authelia input validation error vulnerability
Github authelia is an application from Github USA. An open source authentication and authorization server that provides 2-factor authentication and single sign-on SSO to applications through a web portal. Authelia version 4.27.4 and prior versions contain an input validation error vulnerability...
Authorization
Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on SSO for your applications via a web portal. In versions 4.27.4 and earlier, utilizing a HTTP query parameter an attacker is able to redirect users from the web application to an...
SUSE: Security Advisory (SUSE-SU-2018:2089-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows and Windows Server Security Feature Bypass Vulnerability (CNVD-2021-29103)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security feature bypass vulnerability exists in "Azure AD Web Sign-in" in Microsoft...
HPE IceWall SSO 跨站脚本漏洞
HPE IceWall SSO is a single sign-on program from Hewlett Packard Enterprise hpe that provides authentication capabilities to users. A cross-site scripting vulnerability exists in HPE IceWall SSO Domain Gateway and affects the following products and versions: HPE IceWall SSO Domain Gateway 10.0 on...
CVE-2021-27092
Azure AD Web Sign-in Security Feature Bypass Vulnerability...
CVE-2021-27092
Azure AD Web Sign-in Security Feature Bypass Vulnerability...
Security feature bypass
Azure AD Web Sign-in Security Feature Bypass Vulnerability...
CVE-2021-27092 Azure AD Web Sign-in Security Feature Bypass Vulnerability
...
CVE-2021-27092
CVE-2021-27092: Azure AD Web Sign-in Security Feature Bypass Vulnerability. The connected data confirms a concrete vulnerability in Azure Active Directory web sign-in, enabling arbitrary browsing via federated endpoints. CVSS metrics show a high to critical impact (CVSSv3.1: 9.8, NETWORK, LOW exp...
Azure AD Web Sign-in Security Feature Bypass Vulnerability
...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2021-20480)
Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...
KLA12139 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...
KB5001339: Windows 10 version 1803 Security Update (April 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...
CVE-2021-27092: Undefined Security Weakness
Azure AD Web Sign-in Security Feature Bypass Vulnerability...
Microsoft Azure 安全特征问题漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security feature bypass vulnerability exists in "Azure AD Web Sign-in" in Microsoft...
Open Redirection
github.com/pomerium/pomerium is vulnerable to open redirect. Lack of verification of pomeriumsignature affects routes responsible for sign in/out. However, it does not introduce an authentication bypass...
CVE-2021-29652
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process...