729 matches found
SimpleSAMLphp logout.php link_href Parameter XSS
The version of SimpleSAMLphp on the remote host contains a cross-site scripting vulnerability because it fails to sanitize input to the 'linkhref' parameter of the 'logout.php' script before including it in a web page. An attacker can leverage this issue by enticing a user to follow a malicious...
Debian DSA-2387-1 : simplesamlphp - insufficient input sanitation
'timtai1' discovered that simpleSAMLphp, an authentication and federation platform, is vulnerable to a cross site scripting attack, allowing a remote attacker to access sensitive client data. The oldstable distribution lenny does not contain a simplesamlphp package. %NASLMINLEVEL 70300 C Tenable...
[SECURITY] [DSA 2387-1] simplesamlphp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2387-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 11, 2012 http://www.debian.org/security/faq -...
DSA-2387-1 simplesamlphp - cross site scripting
Bulletin has no description...
[SECURITY] [DSA 2330-1] simplesamlphp security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2330-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 27, 2011 http://www.debian.org/security/faq -...
Debian DSA-2330-1 : simplesamlphp - XML encryption weakness
Issues were found in the handling of XML encryption in simpleSAMLphp, an application for federated authentication. The following two issues have been addressed : It may be possible to use an SP as an oracle to decrypt encrypted messages sent to that SP. It may be possible to use the SP as a key...
[SECURITY] [DSA 2330-1] simplesamlphp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2330-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 27, 2011 http://www.debian.org/security/faq -...
