CVE-2021-28091

Опубликовано: 04 июн. 2021

Источник: debian

EPSS Низкий

Описание

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

Пакет	Статус	Версия исправления	Релиз	Тип
lasso	fixed	2.6.1-3		package

https://bugzilla.redhat.com/show_bug.cgi?id=1940089
https://blogs.akamai.com/2021/06/saml-implementation-vulnerability-impacting-some-akamai-services.html
https://blogs.akamai.com/2021/06/akamai-eaa-impersonation-vulnerability---a-deep-dive.html
https://git.entrouvert.org/lasso.git/commit/?id=ea7e5efe9741e1b1787a58af16cb15b40c23be5a

EPSS

Процентиль: 73%

0.00772

Низкий

CVE-2021-28091

CVSS3: 7.5

ubuntu

около 4 лет назад

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

CVE-2021-28091

CVSS3: 8.8

redhat

около 4 лет назад

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

CVE-2021-28091

CVSS3: 7.5

nvd

около 4 лет назад

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

CVE-2021-28091

CVSS3: 7.5

msrc

больше 3 лет назад

Описание отсутствует

openSUSE-SU-2021:1057-1

suse-cvrf

почти 4 года назад

Security update for lasso

EPSS

Процентиль: 73%

0.00772

Низкий