OneLogin SAML SSO, CVE-2016-10928
- CVE, Research URL
- Home page URL
- Application
- Published on
- Aug 23, 2019
- Research Description
- The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.
- Affected versions
-
max 2.2.0.
- Status
-
vulnerable