NewsCERT-FR (ANSSI)
Multiples vulnérabilités dans le greffon OpenID Connect OpenID Provider (OIDC OP) pour Shibboleth (10 novembre 2026)
Teaser from the source
De multiples vulnérabilités ont été découvertes dans le greffon OpenID Connect OpenID Provider (OIDC OP) pour Shibboleth. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité.
This is the RSS-feed teaser. Read the full article at the original source.
Read at CERT-FR (ANSSI)More on OpenID
Other advisories
- Not ratedosv:RHSA-2026:97861Red Hat Security Advisory: mod_auth_openidc security update
- Not ratedosv:RHSA-2026:92157Red Hat Security Advisory: mod_auth_openidc:2.3 security update
- Not ratedosv:RHSA-2026:92159Red Hat Security Advisory: mod_auth_openidc:2.3 security update
- Not ratedosv:RHSA-2026:92160Red Hat Security Advisory: mod_auth_openidc:2.3 security update
- Not ratedosv:RHSA-2026:92158Red Hat Security Advisory: mod_auth_openidc:2.3 security update
- Not ratedosv:RLSA-2026:97861Important: mod_auth_openidc security update
- CriticalCVE-2019-11027Ruby OpenID vulnerability
- Not ratedosv:USN-9085-1ruby-openid vulnerability
Other news entries
- Shibboleth Identity Provider (OpenID Connect OP Plugin): Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- Red Hat Enterprise Linux (mod_auth_openidc): Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- Red Hat Enterprise Linux (mod_auth_openidc): Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- SimpleHelp bug lets hackers create rogue remote support accountsNewsBleepingComputer
- (g+) Security: Wie Unternehmen mit IAM Risiken reduzierenNewsGolem.de — Security
Source: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1491/
ID