CVE-2015-2684

概要

参考情報

• debian.org/security/2015/dsa-3207
• securityfocus.com/bid/73314
• shibboleth.net/community/advisories/secadv_20150319.txt · Vendor Advisory

service provider のその他の脆弱性

• CVE-2023-22947高 7.3Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local at…
• CVE-2021-31826高 7.5Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is…
• CVE-2021-28963中 5.3Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
• CVE-2019-19191高 7.8Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service use…
• CVE-2010-2450高 7.5The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which i…