Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during SAML response validation. When using the spring-security-saml2-service-provider component, a malicious user can carefully modify an otherwise valid SAML response and append an arbitrary assertion that Spring Security will accept as valid.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: pivotal
Published: 2020-05-13T17:00:15.881645Z
Updated: 2024-09-16T23:56:17.066Z
Reserved: 2020-01-03T00:00:00
Link: CVE-2020-5407
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-05-13T17:15:11.967
Modified: 2024-11-21T05:34:06.070
Link: CVE-2020-5407
Redhat
No data.