Uninett vulnerabilities

Products

• Mod Auth Mellon 8
• Radsecproxy 3

Newest

• uninett mod auth mellon A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue... CVE-2021-3639 Fix available 6.1 MediumAugust 4, 2021
• radsecproxy, fedoraproject fedora +1 more Missing input validation in dynamic discovery example scripts. CVE-2021-32642 Fix available 7.0 HighMay 28, 2021
• canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +2 more +4 more A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL... CVE-2019-3877 Fix available 5.8 MediumMarch 22, 2019
• canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +8 more +10 more A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse... CVE-2019-3878 Fix available 8.1 HighMarch 21, 2019
• uninett mod auth mellon mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user... CVE-2017-6807 Fix available 6.1 MediumMarch 13, 2017
• fedoraproject fedora, uninett mod auth mellon +1 more The am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data... CVE-2016-2146 Fix available 7.5 HighApril 15, 2016
• fedoraproject fedora, uninett mod auth mellon +1 more The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the... CVE-2016-2145 Fix available 7.5 HighApril 15, 2016
• oracle linux, uninett mod auth mellon +1 more The mod_auth_mellon module before 0.8.1 allows remote attackers to obtain sensitive information... CVE-2014-8566 Fix available 6.4 MediumNovember 15, 2014
• redhat enterprise linux desktop, enterprise linux server, enterprise linux server aus +4 more +6 more The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service ... CVE-2014-8567 Fix available 9.4 HighNovember 14, 2014
• uninett radsecproxy The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are... CVE-2012-4566 Fix available 6.4 MediumNovember 10, 2012
• uninett radsecproxy radsecproxy before 1.6.1 does not properly verify certificates when there are configuration... CVE-2012-4523 Fix available 6.4 MediumNovember 10, 2012