| Max CVSS | 6.0 | Min CVSS | 6.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-0277 | 6.0 |
The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. N
|
12-02-2023 - 23:15 | 17-08-2015 - 20:59 | |
| CVE-2015-6254 | 6.0 |
The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows r
|
19-08-2015 - 22:54 | 17-08-2015 - 20:59 |