Threats tagged 'ghsa-wcq4-9xxp-5px6'

A critical vulnerability in Picketlink Federation SAML allows the unsolicited response handler to accept forged assertions without verification. This flaw enables an unauthenticated attacker to impersonate any principal in any role, potentially leading to information disclosure and unauthorized access to restricted operations.