CVE-2015-2684

Mô tả

Tham khảo

• debian.org/security/2015/dsa-3207
• securityfocus.com/bid/73314
• shibboleth.net/community/advisories/secadv_20150319.txt · Vendor Advisory

Lỗ hổng khác của service provider

• CVE-2023-22947CAO 7.3Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local at…
• CVE-2021-31826CAO 7.5Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is…
• CVE-2021-28963TRUNG BÌNH 5.3Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
• CVE-2019-19191CAO 7.8Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service use…
• CVE-2010-2450CAO 7.5The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which i…