GHSA-x2fr-v8wf-8wwv

ghsaUSosv

Ruby-SAML Improper Authentication vulnerability

view advisory published 2019-07-05Licence: CC-BY-4.0

OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-11428US	critical9.8	2.46% (84th)	—	2019-04-17
OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the…

references

External citations — patches, advisories, analysis.

https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementationsWEB
https://nvd.nist.gov/vuln/detail/CVE-2017-11428ADVISORY
https://www.kb.cert.org/vuls/id/475445WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan