ROBOT Attack – Security Advisory for the Shibboleth Identity Provider
folder_openGeneral, Recommendations
We would like to inform you about a new security advisory for the Shibboleth Identity Provider, which was published on 23rd January 2018. The vulnerability is based on the so-called ROBOT Attack which allows attackers to read and modify the HTTPS data traffic if the webserver offers an outdated RSA encryption. In case of an…