Most recent entries from all

cnvd-2015-05780

EUVD-2026-91653

fkie_cve-2015-3158

The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.

GHSA-9qhq-j4xm-cw48 — PicketLink does not properly check role based authorization

Affected: Maven: org.picketlink:picketlink-tomcat-common

The `invokeNextValve` function in `identity/federation/bindings/tomcat/idp/AbstractIDPValve.java` in PicketLink before 2.7.1.Final does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a (1) direct request or (2) request through an SP initiated flow.

gsd-2015-3158

RHSA-2015:1669 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

PicketLink: PicketLink IDP ignores role based authorization

WID-SEC-W-2026-0180 — Dell Data Protection Advisor: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.