Red Hat Picketlink
2 CVEs affecting Red Hat Picketlink. Latest disclosed: 2019-06-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3873 | Medium | 6.4 | 2019-06-12 | It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker coul… |
CVE-2019-3872 | Medium | 5.4 | 2019-06-12 | It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacke… |