Skip to content
OpenAdvisories

Product · pspete

psPAS

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

    psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to…