Gregarius » BetaNews.Com » New vulnerability allows attackers to trick single sign on systems

Canaux

108470 éléments (108470 non lus) dans 10 canaux

Actualités (48730 non lus)

• 01net. Actualités (48730 non lus)

Hoax (65 non lus)

• Top dix quotidien Sophos des canulars (65 non lus)

Logiciels (39066 non lus)

• BetaNews.Com (34382 non lus)
• Presence PC - Actualité Logiciels, jeux vidéos (3551 non lus)
• LeMondeInformatique.fr : Actualités Applications (1133 non lus)

Sécurité (1668 non lus)

• Actualités Sécurité Informatique (406 non lus)
• Les Nouvelles.net : sécurité informatique. (1262 non lus)

Referencement (18941 non lus)

• Secrets2moteurs (11793 non lus)
• Referencement Google WebRankInfo (2255 non lus)
• Abondance (4893 non lus)

BetaNews.Com

• 

  New vulnerability allows attackers to trick single sign on systems

  Publié: février 27, 2018, 4:14pm CET par Ian Barker

  Single sign on (SSO) is popular with businesses as it allows control of access to multiple resources without the need for lots of different credentials. But researchers at Duo Security have uncovered a vulnerability that can allow attackers to trick systems based on the commonly used SAML (Security Assertion Markup Language) into giving them a higher level of access. Armed with an existing ID and password an attacker with only moderate technical skill can fool the SAML system into authenticating as another user without needing to know that user's password. Since most corporate systems have a standard pattern for user… [Continue Reading]