PT-2015-6876 · Adnovum · Nevisauth

Antoine Neuenschwander + 1 · Publicado 2015-09-28 · Atualizado 2018-10-09 · CVE-2015-5372

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AdNovum nevisAuth versions 4.13.0.0 through 4.18.3.0

Description The issue concerns the SAML 2.0 implementation when using SAML POST-Binding. It does not properly match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP). This allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.

Recommendations For AdNovum nevisAuth versions 4.13.0.0 through 4.18.3.0, update to version 4.18.3.1 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2015-5372

Produtos afetados

Nevisauth

Referências · 6

• http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth · Nota
• http://csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt · Nota
• http://seclists.org/fulldisclosure/2015/Sep/87 · Nota
• http://securityfocus.com/archive/1/536508/100/0/threaded · Nota
• http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5372 · Nota de Segurança