XM-hell strikes single-sign-on systems: Bugs allow miscreants to masquerade as others

Yeah, I’m so totally Sarah from accounts… Various single-sign-on systems can be hoodwinked to allow miscreants to log in as strangers without their password, all thanks to bungled programming.… The Register – Security Secure Hunter Anti -Malware