Skip to content
Threat Feed
Subscribe

Tag

Picketlink

1 brief RSS
critical advisory

PicketLink Federation SAML Authentication Bypass via Forged Assertions

A vulnerability in the PicketLink Federation SAML unsolicited response handler allows unauthenticated attackers to forge assertions, resulting in full authentication bypass as any principal.

PicketLink Federation authentication-bypass saml picketlink vulnerability
1t 1c