Filtered by vendor Inverse Subscriptions
Filtered by product Sogo Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-33054 2 Debian, Inverse 2 Debian Linux, Sogo 2024-11-21 7.5 High
SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)