Duo Security reports SAML vulnerability affecting single sign-on systems, allows attackers with authenticated access to log in as other users without a password (Zack Whittaker/ZDNet)

http://ift.tt/2ow6Dgz

Zack Whittaker / ZDNet:
Duo Security reports SAML vulnerability affecting single sign-on systems, allows attackers with authenticated access to log in as other users without a password  —  A validation bug in how some single sign-on products implemented an open authentication standard could have allowed an attacker …