XM-hell strikes single-sign-on systems: Bugs allow miscreants to masquerade as others

Yeah, I’m so totally Sarah from accounts…

Various single-sign-on systems can be hoodwinked to allow miscreants to log in as strangers without their password, all thanks to bungled programming.…

The Register – Security
Secure Hunter Anti -Malware