NewsCERT-FR (ANSSI)
Multiples vulnérabilités dans le greffon OpenID Connect OpenID Provider (OIDC OP) pour Shibboleth (10 novembre 2026)
Teaser from the source
De multiples vulnérabilités ont été découvertes dans le greffon OpenID Connect OpenID Provider (OIDC OP) pour Shibboleth. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité.
This is the RSS-feed teaser. Read the full article at the original source.
Read at CERT-FR (ANSSI)More on OpenID
Other advisories
- Not ratedosv:RLSA-2026:97861Important: mod_auth_openidc security update
- CriticalCVE-2019-11027Ruby OpenID vulnerability
- HighCVE-2026-54789Red Hat Enterprise Linux (mod_auth_openidc): Schwachstelle ermöglicht Denial of Service
- Not ratedosv:CVE-2026-118412Apache Roller: Disabled accounts can sign in through OpenID
- LowCVE-2026-118412Improper Authentication in Apache Roller 5.1.0 through 6.1.6 allows a user whose account an administrator has disabled to sign in again through OpenID and re…
- Mediumbsi:WID-SEC-2026-4449Shibboleth Identity Provider (OpenID Connect OP Plugin): Schwachstelle ermöglicht Cross-Site Scripting
- Not ratedCVE-2026-111260The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a non-cryptographic random number generator and insuff…
- Not ratedosv:CLSA-2026-1794238093TuxCare security update for org.eclipse.jetty:jetty-openid (1 CVE)
Other news entries
- Shibboleth Identity Provider (OpenID Connect OP Plugin): Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- Red Hat Enterprise Linux (mod_auth_openidc): Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- Red Hat Enterprise Linux (mod_auth_openidc): Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- SimpleHelp bug lets hackers create rogue remote support accountsNewsBleepingComputer
- (g+) Security: Wie Unternehmen mit IAM Risiken reduzierenNewsGolem.de — Security
Source: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1491/
ID