CVEvulnerability
CVE-2015-5372
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-09-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-287
Description
The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.
Affected configurations
• adnovum nevisauth (<= 4.18.3.0)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth blog.csnc.ch
- http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2015/Sep/87 seclists.org
- http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt www.csnc.ch
- http://www.securityfocus.com/archive/1/536508/100/0/threaded www.securityfocus.com
- http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth blog.csnc.ch
- http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2015/Sep/87 seclists.org
- http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt www.csnc.ch
- http://www.securityfocus.com/archive/1/536508/100/0/threaded www.securityfocus.com