CVE-2016-10928

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users

published August 22, 2019

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.7th percentile
Published
2019-08-22T19:40Z
EPSS history
Timeline
  • 22 AUG 19:40Z
    The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users
    cvelistv5