Vulnerability in ArcGIS Enterprise

Philipp Moa and Felix Aeppli identified a Padding Oracle vulnerability in the SAML login of ArcGIS.