There’s a serious bug in the current implementation of SAML authentication which allows an unauthenticated attacker to log into any existing user account without a password.
iPROS24
Exercises in web development
Blog Archives
Etc
Varied topics in software development and system administration.
Posted in Software, System Administration Tagged with: Brute-force attack, EL6, Fail2ban, Null routing, SELinux, WordPress
