PT-2015-6876 · Adnovum · Nevisauth

Antoine Neuenschwander + 1 · Published 2015-09-28 · Updated 2018-10-09 · CVE-2015-5372

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AdNovum nevisAuth versions 4.13.0.0 through 4.18.3.0

Description The issue concerns the SAML 2.0 implementation when using SAML POST-Binding. It does not properly match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP). This allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.

Recommendations For AdNovum nevisAuth versions 4.13.0.0 through 4.18.3.0, update to version 4.18.3.1 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2015-5372

Affected Products

Nevisauth

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2015-5372 · Security Note
• http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth · Note
• http://csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt · Note
• http://seclists.org/fulldisclosure/2015/Sep/87 · Note
• http://securityfocus.com/archive/1/536508/100/0/threaded · Note
• http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html · Note