GitHub Advisoryadvisory · RubyGems

GHSA-94hm-8q65-rmxm OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal

HIGH Published 2019-07-05 Modified 2023-08-29 Official page ↗
Aliases
CVE-2017-11430
Ecosystem
RubyGems
Packages
omniauth-saml
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-287
Reviewed
2020-06-16

Affected packages

• RubyGems omniauth-saml: < 1.10.0 → fixed in 1.10.0

Description

OmniAuth OmniAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

Related

Alias · CVE (1)

  • CVE-2017-11430 OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References