Various single-sign-on systems can be hoodwinked to allow miscreants to log in as strangers without their password, all thanks to bungled programming. Specifically, the vulnerable authentication suites mishandle information submitted in the XML-like Security Assertion Markup Language (SAML).
from Google Alert - vulnerability http://ift.tt/2HSlwlw
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment