CVE-2022-39300
Assigner: GitHub_M
Published: 2022-10-13T00:00:00
State: PUBLISHED
title: Signature bypass via multiple root elements in node-SAML
descriptions: value: node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML element. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be triggered. Users should upgrade to node-saml version 4.0.0-beta5 or newer. Disabling SAML authentication may be done as a workaround.
affected: vendor: node-saml
product: node-saml
versions: version: < 4.0.0-beta.5
status: affected
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: LOW
baseScore: 7.7
baseSeverity: HIGH
problemTypes: descriptions: type: CWE
description: CWE-347: Improper Verification of Cryptographic Signature
cweId: CWE-347
source: advisory: GHSA-5p8w-2mvw-38pv
discovery: UNKNOWN