CVE-2018-1000809

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=&pass= to /validate/check url. This vulnerability appears to have been fixed in...

PT-2018-9533

Name of the Vulnerable Software and Affected Versions privacyIDEA versions prior to 2.23.2 Description The issue is related to improper input validation in the token validation API, which can lead to a Denial-of-Service. This can be exploited via an HTTP request to the "/validate/check" API...