https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:27:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05553 bdu:2024-05553 https://cve.radiocsirt.org/vuln/bdu:2024-05553 https://cve.radiocsirt.org/vuln/cnvd-2024-33812 cnvd-2024-33812 https://cve.radiocsirt.org/vuln/cnvd-2024-33812 https://cve.radiocsirt.org/vuln/euvd-2026-223717 EUVD-2026-223717 https://cve.radiocsirt.org/vuln/euvd-2026-223717 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41107 <p>The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account.</p> <p>Affected users are recommended to disable the SAML authentication plugin by setting the &#34;saml2.enabled&#34; global setting to &#34;false&#34;, or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.</p> <p>The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account.</p> <p>Affected users are recommended to disable the SAML authentication plugin by setting the &#34;saml2.enabled&#34; global setting to &#34;false&#34;, or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41107 https://cve.radiocsirt.org/vuln/ghsa-gmm6-5xx7-57r6 <p>The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account.</p> <p>Affected users are recommended to disable the SAML authentication plugin by setting the &#34;saml2.enabled&#34; global setting to &#34;false&#34;, or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.</p> <p>The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account.</p> <p>Affected users are recommended to disable the SAML authentication plugin by setting the &#34;saml2.enabled&#34; global setting to &#34;false&#34;, or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-gmm6-5xx7-57r6 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1681 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache CloudStack ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache CloudStack ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1681