CVE-2026-59151

Katalog CVE

CVSS 9.6 · Critical EPSS 0,53%

Kerentanan Improper Authentication pada prowler. Skor CVSS 3.1 9.6 (Critical) menurut github.com.

Deskripsi (NVD)

Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token, and the ACS finish logic in api/src/backend/api/v1/views.py recalculated the tenant from user.email instead of binding token issuance to the validated SAML configuration. An authenticated attacker with a controlled SAML IdP could complete a valid SAML flow for an attacker-controlled domain while asserting an email address from another configured domain, causing a SAMLToken and tenant-scoped JWT to be issued for the wrong tenant and enabling cross-tenant account takeover. This issue is fixed in version 5.30.3.

Rincian

Terbit di NVD

10 Juli 2026

Terakhir diubah

26 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.6 (Critical), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/prowler-cloud/prowler/security/advisories/GHSA-h8m9-jgf8-vwvp exploit · advisory vendor
• https://github.com/prowler-cloud/prowler/commit/bf3b5c2ba713e533014927141b64948c82c8f32e patch
• https://github.com/prowler-cloud/prowler/commit/f5ff30ad175bd2edf02cd28872653c1cda5867b7 patch
• https://github.com/prowler-cloud/prowler/pull/11650 issue tracking
• https://github.com/prowler-cloud/prowler/releases/tag/5.30.3 release notes