Количество 5
Количество 5
CVE-2021-31826
Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied.
CVE-2021-31826
Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied.
CVE-2021-31826
Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointe ...
GHSA-rqpx-m7mv-mxxf
Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied.
BDU:2021-04580
Уязвимость функции восстановления сеанса компонента технологии аутентификации Shibboleth Service Provider, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-31826 Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied. | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад | |
CVE-2021-31826 Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied. | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад | |
CVE-2021-31826 Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointe ... | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад | |
GHSA-rqpx-m7mv-mxxf Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied. | 1% Низкий | больше 3 лет назад | ||
BDU:2021-04580 Уязвимость функции восстановления сеанса компонента технологии аутентификации Shibboleth Service Provider, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад |
Уязвимостей на страницу