client_secret, that can be used to authenticate to the client's website. Depending on the OAuth server settings, the attacker may even get an administrator role on the client's website. Simple Single Sign On by Dash10 Digital <= 4.1.0 - Auth Bypass
REPORT ID: 4deb2665-f3e5-46d3-958c-0b3435fecdc4
The plugin contains an Auth Bypass vulnerability due to the plugin leaks its OAuth
You need to log in to view the vulnerability details.
Attributes
- Catgory
- WordPress Plugin
- Vulnerability Discovered
- 2022-06-01
- Report Published
- 2022-06-04
- Affected Version
- <= 4.1.0
Classification
- Type
- Authentication Bypass
Support Us?
We would truly appreciate it if you bought us a bunny (food for a snow leopard).
