gitlab-org--gitlab-foss/changelogs
Rémy Coutable d1afb845b1 Merge branch 'fix-shibboleth-auth-with-no-uid' into 'master'
fix shibboleth misconfigurations resulting in authentication bypass

This merge request fixes #22267 where a misconfigured Shibboleth `HTTP_UID` or `HTTP_EPPN` could result in users being logged into an account that did not belong to them.

See merge request !7428
2016-11-16 17:28:56 +00:00
..
unreleased Merge branch 'fix-shibboleth-auth-with-no-uid' into 'master' 2016-11-16 17:28:56 +00:00
archive.md Archive CHANGELOG entries prior to 8.0 in changelogs/archive.md 2016-09-09 14:36:01 -04:00