Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wx4h-wgr2-66h2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

EPSS

Процентиль: 39%
0.00176
Низкий

Дефекты

CWE-20
CWE-345

Связанные уязвимости

CVSS3: 7.2
nvd
больше 5 лет назад

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.

EPSS

Процентиль: 39%
0.00176
Низкий

Дефекты

CWE-20
CWE-345