The vulnerability is in the XML comments inserted into SAML response requests. In most cases, the XML canonicalization algorithm will remove comments while validating the signature. This means any attacker can add comments to a SAML response without invalidating the signature. All an attacker ...
from Google Alert - vulnerability http://ift.tt/2HSYNFO
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment