57
USN-8768-1: Shibboleth vulnerability
Ubuntu patches Shibboleth SQL injection in the ODBC storage plugin allowing remote attackers to extract sensitive information.
Ubuntu security notice USN-8768-1 fixes a Shibboleth vulnerability discovered by Florian Stuhlmann. The software incorrectly escaped input when using the ODBC storage plugin, allowing a remote attacker to perform SQL injection attacks and obtain sensitive information. Users are advised to update the Shibboleth package.
15
30
30
35
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
47
55
42
30
30
55
30
55