CVSS 9.8 · Critical EPSS 10,7%
Kerentanan Improper Verification of Cryptographic Signature pada onelogin ruby-saml, omniauth saml +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| onelogin | ruby-saml | Semua versi sebelum 1.12.3 |
| onelogin | ruby-saml | Versi 1.13.0 hingga sebelum 1.17.0 |
| omniauth | omniauth saml | Semua versi hingga 1.10.3 |
| omniauth | omniauth saml | Versi 2.0.0 |
| omniauth | omniauth saml | Versi 2.1.0 |
| gitlab | gitlab | Semua versi sebelum 16.11.10 |
| gitlab | gitlab | Versi 17.0.0 hingga sebelum 17.0.8 |
| gitlab | gitlab | Versi 17.1.0 hingga sebelum 17.1.8 |
| gitlab | gitlab | Versi 17.2.0 hingga sebelum 17.2.7 |
| gitlab | gitlab | Versi 17.3.0 hingga sebelum 17.3.3 |