Record · corpus.blog/posts/01a0c55a-a8c8-7002-a929-264f5e0e1395

SAML Padding Oracle

blog.compass-security.com · published 30 September 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.compass-security.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 7
Words captured: 1,430

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2021-update-1-patch/

esri.com

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29108

cve.mitre.org

http://www.w3.org/2001/04/xmlenc

w3.org

https://www.nds.ruhr-uni-bochum.de/media/nds/veroeffentlichungen/2011/10/22/HowToBreakXMLenc.pdf

nds.ruhr-uni-bochum.de

https://enterprise.arcgis.com/

enterprise.arcgis.com

https://epi052.gitlab.io/notes-to-self/blog/2019-03-13-how-to-test-saml-a-methodology-part-two/

epi052.gitlab.io

Attack of the week: XML Encryption Read at the source ↗

blog.cryptographyengineering.com

Elsewhere on blog.compass-security.com (18)

https://www.compass-security.com/fileadmin/Research/Advisories/2021-17_CSNC-2021-006_ArcGIS_Enterprise_SAML_XSW_Padding_Oracle.txt

compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/2021-09-29-16_24_19-padding_oracle.pptx-PowerPoint.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image2021-7-30_9-57-51.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/img1_new.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image-2.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image-3.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image-4.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image2021-7-29_11-50-40.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image-5.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/900px-CBC_decryption.svg_.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image2021-7-30_10-2-19.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image2021-7-30_10-6-10.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image-6.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/2021-09-29-16_34_20-padding_oracle.pptx-PowerPoint.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/2021-09-29-16_34_31-padding_oracle.pptx-PowerPoint.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image2021-7-30_10-21-11.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/09/image2021-7-30_10-36-31.png

blog.compass-security.com

https://blog.compass-security.com/wp-content/uploads/2021/10/image.png

blog.compass-security.com