Поиск уязвимостей
Количество 6
Количество 6
CVE-2021-33054
SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)
CVE-2021-33054
SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)
CVE-2021-33054
SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not valida ...
GHSA-5x58-gqg4-wfvq
SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)
BDU:2021-04894
Уязвимость метода аутентификации программного обеспечения для совместной работы SOGo, связанная с некорректным подтверждением криптографической подписи данных, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2021-1970
ALT-PU-2021-1970: package `sogo` update to version 5.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-33054 SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.) | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
 | CVE-2021-33054 SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.) | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
| CVE-2021-33054 SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not valida ... | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
| GHSA-5x58-gqg4-wfvq SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.) | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
 | BDU:2021-04894 Уязвимость метода аутентификации программного обеспечения для совместной работы SOGo, связанная с некорректным подтверждением криптографической подписи данных, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
| ALT-PU-2021-1970 ALT-PU-2021-1970: package `sogo` update to version 5.1.1-alt1 | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу