8.8Yüksek
CVE-2026-78428Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
Açıklama
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
Zayıflık türü (CWE):
CWE-384
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx vendor-advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1279937 issue-tracking