Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4fg4-5r24-wpff

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

EPSS

Процентиль: 69%
0.00609
Низкий

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 7.2
nvd
больше 5 лет назад

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

EPSS

Процентиль: 69%
0.00609
Низкий

Дефекты

CWE-755