[JIRA] (SSPCPP-961) Shibboleth SP - Windows - possible Privilege Escalation

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on SSPCPP-961 ( https://shibboleth.atlassian.net/browse/SSPCPP-961?atlOrigin=eyJpIjoiNjI5NzkyMWFlZmE2NGNmMjkxMmQ2YmMyZWM0MWEyMjIiLCJwIjoiaiJ9 )

Re: Shibboleth SP - Windows - possible Privilege Escalation ( https://shibboleth.atlassian.net/browse/SSPCPP-961?atlOrigin=eyJpIjoiNjI5NzkyMWFlZmE2NGNmMjkxMmQ2YmMyZWM0MWEyMjIiLCJwIjoiaiJ9 )

It’s being released in 3.4.1 shortly because something more important necessitated a release, but there will be a short leash. If we get any more than 1-2 complaints about IIS breaking, it will be reverted. And I do expect we will. We can’t know all the accounts people use IIS with, and so there’s no full answer except “set the ACLs to what you need them to be”, which was the original approach we took.

( https://shibboleth.atlassian.net/browse/SSPCPP-961#add-comment?atlOrigin=eyJpIjoiNjI5NzkyMWFlZmE2NGNmMjkxMmQ2YmMyZWM0MWEyMjIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/SSPCPP-961#add-comment?atlOrigin=eyJpIjoiNjI5NzkyMWFlZmE2NGNmMjkxMmQ2YmMyZWM0MWEyMjIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100213- sha1:cca7326 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230110/ce79ee51/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-879a91d0-1124-45cc-b531-b657d0001d67
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230110/ce79ee51/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-4fadc0e5-a6f8-4401-9b28-70fcc8d512b5
Type: image/png
Size: 345 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230110/ce79ee51/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-2f619e71-5c06-4907-a41a-9c4e0b57fbf8
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230110/ce79ee51/attachment-0005.png>