Description A session hijack risk was identified in the Shibboleth authentication plugin. Remediation References CVE-2021-40691 Related Vulnerabilities GeoServer CVE-2023-35042 Vulnerability (CVE-2023-35042) Envoy Proxy Other Vulnerability (CVE-2024-34363) Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9518) WordPress Plugin FluentAuth-The Ultimate Authorization & Security for WordPress Security Bypass (1.0.1) Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-43394) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Tags Missing Update Known Vulnerabilities CVE-2021-40691