Skip to content
Threat Feed

Product

Identity Provider

2 briefs RSS
medium advisory

Multiple Vulnerabilities in Shibboleth Products Leading to DoS and Security Policy Bypass

Multiple vulnerabilities have been discovered in Shibboleth Identity Provider and OpenSAML Java library that allow an attacker to cause a remote denial of service and security policy bypass, addressed in versions 5.2.2 and later.

Identity Provider +1 shibboleth denial-of-service security-policy-bypass
2r 1t 1c
medium advisory

Shibboleth Identity Provider Vulnerabilities Leading to SMTP Injection and Denial of Service

Multiple vulnerabilities in Shibboleth Identity Provider allow an attacker to perform SMTP injection or cause a denial of service.

Identity Provider vulnerability denial-of-service smtp-injection
1r 1t