Vulnerabilities could allow an attacker to bypass single sign-on login protection; users should disable SSO until patching is ...