CNVD-2015-05644 | Vulnetix

CNVD-2015-05644 PUBLISHED

Record from circl · Published August 17, 2015

Red Hat PicketLink是美国红帽（Red Hat）公司的一套用于Java应用程序的统一身份管理框架。 Red Hat PicketLink 2.7.0之前版本的Service Provider(SP)和Identity Provider(IdP)中存在安全漏洞，该漏洞源于程序未能正确验证SAML断言的Response元素中的Destination属性。远程攻击者可利用该漏洞登录受影响用户的账户。

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2015-05644
vulnetix vdb fixes CNVD-2015-05644

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2015-05644/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →