Red Hat Security AdvisoryRHSA-2019:2112
mod_auth_openidc security update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) mod_auth_openidc-1.8.8-5.el7
- Red Hat Enterprise Linux Workstation (v. 7) mod_auth_openidc-1.8.8-5.el7
Fixes 2 records
Priority MEDIUM 44
The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "AuthType oauth20" config…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.04253 · Published 2017-03-02 · Fixed CWE-287
Priority MEDIUM 41
Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows remote attackers to spoof page content via a malicious URL provided to the user, which tri…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05177 · Published 2017-04-12 · Fixed CWE-20
