Test Kennung:	1.3.6.1.4.1.25623.1.0.883036
Kategorie:	CentOS Local Security Checks
Titel:	CentOS: Security Advisory for mod_auth_mellon (CESA-2019:0766)
Zusammenfassung:	The remote host is missing an update for the 'mod_auth_mellon'; package(s) announced via the CESA-2019:0766 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'mod_auth_mellon' package(s) announced via the CESA-2019:0766 advisory. Vulnerability Insight: The mod_auth_mellon module for the Apache HTTP Server is an authentication service that implements the SAML 2.0 federation protocol. The module grants access based on the attributes received in assertions generated by an IdP server. Security Fix(es): * mod_auth_mellon: authentication bypass in ECP flow (CVE-2019-3878) * mod_auth_mellon: open redirect in logout url when using URLs with backslashes (CVE-2019-3877) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * mod_auth_mellon Cert files name wrong when hostname contains a number (fixed in upstream package) (BZ#1697487) Affected Software/OS: 'mod_auth_mellon' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-3877 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7NLAU7KROWNTHAYSA2S67X347F42L2I/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CNW5YMC5TLWVWNJEY6AIWNSNPRAMWPQJ/ RedHat Security Advisories: RHSA-2019:0766 https://access.redhat.com/errata/RHSA-2019:0766 RedHat Security Advisories: RHSA-2019:3421 https://access.redhat.com/errata/RHSA-2019:3421 https://usn.ubuntu.com/3924-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-3878 RedHat Security Advisories: RHBA-2019:0959 https://access.redhat.com/errata/RHBA-2019:0959 RedHat Security Advisories: RHSA-2019:0746 https://access.redhat.com/errata/RHSA-2019:0746 RedHat Security Advisories: RHSA-2019:0985 https://access.redhat.com/errata/RHSA-2019:0985
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.