1.0Netwerkheldenhttps://www.netwerkhelden.nl/cmsEltjo van Gulikhttps://www.netwerkhelden.nl/cms/author/admin-eltjo/SAML kwetsbaarheid - Netwerkheldenrich600338<blockquote class="wp-embedded-content" data-secret="ZMBn6jgBFP"><a href="https://www.netwerkhelden.nl/cms/2018/03/01/saml-kwetsbaarheid/">SAML kwetsbaarheid</a></blockquote><iframe sandbox="allow-scripts" security="restricted" src="https://www.netwerkhelden.nl/cms/2018/03/01/saml-kwetsbaarheid/embed/#?secret=ZMBn6jgBFP" width="600" height="338" title="“SAML kwetsbaarheid” — Netwerkhelden" data-secret="ZMBn6jgBFP" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" class="wp-embedded-content"></iframe><script>
/*! This file is auto-generated */
!function(d,l){"use strict";l.querySelector&&d.addEventListener&&"undefined"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!/[^a-zA-Z0-9]/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),o=l.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),c=new RegExp("^https?:$","i"),i=0;i<o.length;i++)o[i].style.display="none";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute("style"),"height"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):"link"===t.message&&(r=new URL(s.getAttribute("src")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener("message",d.wp.receiveEmbedMessage,!1),l.addEventListener("DOMContentLoaded",function(){for(var e,t,s=l.querySelectorAll("iframe.wp-embedded-content"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute("data-secret"))||(t=Math.random().toString(36).substring(2,12),e.src+="#?secret="+t,e.setAttribute("data-secret",t)),e.contentWindow.postMessage({message:"ready",secret:t},"*")},!1)))}(window,document);
</script>
https://www.netwerkhelden.nl/cms/wp-content/uploads/2018/02/samlkwetsbaarheid.jpg1250455Gisteren heeft Duo Labs, het research team van Duo Security, naar buiten gebracht dat er een kwetsbaarheid is gevonden in de XML implementatie van SAML. De details daarover zijn te lezen in hun blog: https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations Wat is SAML SAML, de Security Assertion Markup Language, is een open standaard gebaseerd op de XML markup taal die … Verder lezen