1861 matches found
CVE-2018-15979
The CVE-2018-15979 entry describes an information disclosure vulnerability in Adobe Acrobat/Reader. Affected products include Adobe Acrobat/Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier, with NTLM SSO hash theft as the underlying issue. The...
Security Bulletin: Information disclosure in WebSphere Application Server Liberty affect IBM Operations Analytics - Log Analysis (CVE-2018-1553)
Summary IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptions by the SAML Web SSO feature. Vulnerability Details CVEID: CVE-2018-1553 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote...
Adobe Acrobat < 2015.006.30457 / 2017.011.30106 / 2019.008.20081 Vulnerability (APSB18-40)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30457, 2017.011.30106, or 2019.008.20081. It is, therefore, affected by a vulnerability. - Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456...
CVE-2018-2489
Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version...
CVE-2018-2489
Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version...
CVE-2018-2489
SAP Fiori Client is affected by a local vulnerability that allows an arbitrary Android app to delete the SSO configuration without permissions. The issue is documented across multiple sources (e.g., NVD entry CVE-2018-2489 and CNVD/CVELIST references) and is addressed in version 1.11.5 of SAP Fio...
KLA11357 Information disclosure Vulnerability in Adobe Acrobat and Reader
Vulnerability related to NTLM SSO hash theft was found in Adobe Acrobat and Reader. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories APSB18-40 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More...
sso-shop.ch XSS vulnerability
Open Bug Bounty ID: OBB-696902 Description| Value ---|--- Affected Website:| sso-shop.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
sso-ppd.carrefour.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-695328 Description| Value ---|--- Affected Website:| sso-ppd.carrefour.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden unti...
sso-rct.grassavoye.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-676135 Description| Value ---|--- Affected Website:| sso-rct.grassavoye.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
Security Bulletin: Rational Asset Analyzer (RAA) is affected by a WAS Liberty vulnerability
Summary Rational Asset Analyzer RAA has addressed the following vulnerability: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptions by the SAML Web SSO feature. Vulnerability Details CVEID: CVE-2018-1553...
Protecting user identities
This is a blog series that responds to common questions we receive from customers about the deployment of Microsoft 365 security solutions. In this series, youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out Cybersecurity threats: How ...
Cross site scripting
Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...
CVE-2018-15528
CVE-2018-15528 affects the Java System Solutions SSO plugin for BMC MyIT (version 4.0.13.1). The issue is a reflected XSS in the select_sso() function, where a victim loading a crafted /ux/jss-sso/arslogin?... link and pressing Login can cause client-side scripts to run. The vulnerability enables...
CVE-2017-8989
A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection...
CVE-2017-8989
A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection...
Security feature bypass
A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection...
CVE-2017-8989
CVE-2017-8989 affects HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows. The vulnerability enables remote URL redirection. Root cause and vulnerable component details are not elaborated in the provided documents. No remediation or exploit information is present in the supplied materia...
CVE-2017-8989
A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection...
Security Bulletin: IBM Cúram Social Program Management when not configured with LDAP or SSO may be vulnerable to denial of service.(CVE-2014-6092).
Summary Default authentication methods in IBM Curam Social Program Management do not allow for a per user account lockout policy, and rather employ a single, system wide policy. For most users of the system, a low lockout threshold is desirable. However, for users used to integrate with another...