Skip to contentShibboleth Service Provider vulnerabilities
- shibboleth service provider** DISPUTED ** Insecure folder permissions in the Windows installation path of Shibboleth Service...CVE-2023-22947Disputed7.3 High
- shibboleth service providerShibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw...CVE-2021-31826Fix available7.5 High
- shibboleth service provider, debian linux +1 moreShibboleth Service Provider before 3.2.1 allows content injection because template generation...CVE-2021-28963Fix available5.3 Medium
- shibboleth service providerShibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files...CVE-2019-19191Fix available7.8 High
- debian linux, shibboleth service provider +1 moreThe keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses...CVE-2010-24507.5 High
- shibboleth service provider, debian linux +1 moreshibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth...CVE-2017-16852Fix available8.1 High
- shibboleth service provider, debian linux +1 moreShibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial...CVE-2015-2684Fix available4.0 Medium