GitHub Advisoryadvisory · Go

GHSA-xhqq-x44f-9fgg Authentication Bypass in github.com/russellhaering/gosaml2

CRITICAL Published 2022-02-11 Modified 2021-05-21 Official page ↗
Aliases
CVE-2020-29509
Ecosystem
Go
Packages
github.com/russellhaering/gosaml2
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-115
Reviewed
2021-05-21

Affected packages

• Go github.com/russellhaering/gosaml2: < 0.6.0 → fixed in 0.6.0

Description

Impact Given a valid SAML Response, it may be possible for an attacker to mutate the XML document in such a way that gosaml2 will trust a different portion of the document than was signed. Depending on the implementation of the Service Provider this enables a variety of attacks, including users accessing accounts other than the one to which they authenticated in the Identity Provider, or full authentication bypass. Patches Service Providers utilizing gosaml2 should upgrade to v0.6.0 or greater.

Related

Alias · CVE (1)

  • CVE-2020-29509 The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization… vulnerability

Weakness · CWE (1)

  • CWE-115 Misinterpretation of Input weakness

References