Apache Tomcat treats single quotes as delimiters in cookies

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ' as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks...

GHSA-PF38-CW3P-22Q9 Keycloak is vulnerable to IDN homograph attack

A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges...

[SECURITY] Fedora 34 Update: stb-0^20210910gitaf1a5bc-0.2.fc34

Single-file public domain libraries for C/C++...

Improper authorization in Keycloak

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

CVE-2022-1466

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

CVE-2022-1466

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

Authorization

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

CVE-2022-1466

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

CVE-2022-1466

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

CVE-2022-1466

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

CVE-2022-1466

CVE-2022-1466 affects Red Hat Single Sign-On (Keycloak-based) where improper authorization allows an authenticated user to perform actions beyond permissions, specifically adding users to the master realm. Root cause: insufficient authorization checks for master-realm actions. Impact: potential u...

CVE-2022-1466

A flaw was found in Keycloak. The Red Hat Single Sign-On allowed authed users to perform actions outside their permissions. This flaw makes adding users to the master realm possible even though no respective permission was granted...

CVE-2022-1466: Incorrect Authorization

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...

PT-2022-13909

Name of the Vulnerable Software and Affected Versions Red Hat Single Sign-On affected versions not specified Description The issue is related to improper authorization, allowing users to perform actions they should not be allowed to. Specifically, it was possible to add users to the master realm...

Red Hat Single Sign-On security vulnerabilities

Red Hat Single Sign-On is an authentication and access control system from the American company Red Hat Red Hat. The tool is responsible for authentication and access control functions for the system, supports most authentication protocols Oauth, OpenId Connect, etc., and can be easily integrated...

SUSE-RU-2022:1391-1 Recommended update for salt

This update for salt fixes the following issues: - Fix regression preventing bootstrapping new clients caused by redundant dependency on psutil bsc1197533 - Prevent data pollution between actions processed at the same time bsc1197637 - Fix salt-ssh opts poisoning. bsc1197637 - Clear network...

PT-2022-13435

Name of the Vulnerable Software and Affected Versions Donations WordPress plugin versions prior to 1.8 Description The issue arises from the lack of sanitization and escaping of the nd donations id parameter in SQL statements. This occurs via the /wp-admin/admin-ajax.php AJAX action, specifically...

GSD-2022-1001786 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001464 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

PT-2022-29737

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.19 Description The issue concerns the decoding of NV12M jpegs into single-planar buffers. It is related to the imx-jpeg media component. The actual impact and attack plausibility have not yet been proven...