[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1947 shibboleth-sp, shibboleth-sp2, opensaml2 -- missing input sanitising

ID: oval:org.mitre.oval:def:7213Date: (C)2010-05-24   (M)2022-10-10
Class: PATCHFamily: unix




Matt Elder discovered that Shibboleth, a federated web single sign-on system is vulnerable to script injection through redirection URLs

Platform:
Debian 5.0
Debian 4.0
Product:
shibboleth-sp
shibboleth-sp2
opensaml2
Reference:
DSA-1947
CVE-2009-3300
CVE    1
CVE-2009-3300
CPE    2
cpe:/o:debian:debian_linux:4.x
cpe:/o:debian:debian_linux:5.x

© SecPod Technologies