Category Archives: authentication bypass

VU#475445: Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

Posted on by

Multiple SAML libraries may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature,allowing the attack to potentially bypass authentication to SAML service providers. Continue reading VU#475445: Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal→

Apple Fixes MacOS High Sierra Root Access Vulnerability

Posted on by

Apple has released an emergency fix for an embarrassing vulnerability that allowed people to access the highest privileges account on Mac computers without a password. The vulnerability was disclosed by a user Tuesday on Twitter. He noticed that when p… Continue reading Apple Fixes MacOS High Sierra Root Access Vulnerability→

Siemens Patches Authentication Bypass Flaw in SiPass Server

Posted on by

Siemens patches four vulnerabilities, including a critical authentication bypass flaw, in its SiPass integrated access control server. Continue reading Siemens Patches Authentication Bypass Flaw in SiPass Server→