The SAML vulnerability involves how open source libraries, including Python's lxml or Ruby's REXML, handle XML comments in SAML responses. An attacker who obtains login credentials for an SSO user (through a phishing email, for example) can intercept a SAML response from the SSO system to ...
from Google Alert - vulnerability http://ift.tt/2oCywTD
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment