picketlink records

3 published records for vendor picketlink.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
25Monitor	CVE-2015-0277No exploit	The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction picketlink · picketlink · CWE-284 Broken access control (IDOR)	Medium6.0	—	2.0%	Aug 17, 2015
25Monitor	CVE-2015-6254No exploit	The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in apicketlink · picketlink · CWE-17	Medium6.0	—	1.8%	Aug 17, 2015
17Monitor	CVE-2015-3158No exploit	The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not proppicketlink · picketlink · CWE-264	Medium4.0	—	1.9%	Aug 26, 2015

CVE-2015-0277
25Monitor
The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction
MediumCVSS 6.0No exploitEPSS 2%
- Broken access control (IDOR)
picketlink · picketlinkAug 17, 2015
CVE-2015-6254
25Monitor
The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a
MediumCVSS 6.0No exploitEPSS 2%
picketlink · picketlinkAug 17, 2015
CVE-2015-3158
17Monitor
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not prop
MediumCVSS 4.0No exploitEPSS 2%
picketlink · picketlinkAug 26, 2015