Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Important: lasso

🗓️ 23 Jun 2021 00:00:00Reported by AmazonType 
amazon
 amazon🔗 alas.aws.amazon.com👁 35 Views

An XML Signature Wrapping vulnerability in Lasso allows an attacker to modify SAML responses and impersonate valid users. Update lasso to version 2.5.1-5 to fix the issue

Related
Packages
ReporterTitlePublishedViews
Family
FreeBSD		lasso -- signature checking failure
1 Jun 202100:00
–freebsd
Akamai Blog		SAML Implementation Vulnerability Impacting Some Akamai Services
1 Jun 202113:00
–akamaiblog
Akamai Blog		Akamai EAA Impersonation Vulnerability - A Deep Dive
1 Jun 202104:00
–akamaiblog
Akamai Blog		Akamai EAA Impersonation Vulnerability - A Deep Dive
1 Jun 202113:00
–akamaiblog
Akamai Blog		SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities
1 Jun 202113:00
–akamaiblog
Tenable Nessus		Amazon Linux 2 : lasso (ALAS-2021-1660)
23 Jun 202100:00
–nessus
Tenable Nessus		Amazon Linux AMI : lasso (ALAS-2021-1529)
9 Sep 202100:00
–nessus
Tenable Nessus		AlmaLinux 8 : lasso (ALSA-2021:4325)
9 Feb 202200:00
–nessus
Tenable Nessus		CentOS 8 : lasso (CESA-2021:4325)
11 Nov 202100:00
–nessus
Tenable Nessus		CentOS 7 : lasso (RHSA-2021:2989)
9 Oct 202400:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Amazon Linux2aarch64lasso2.5.1-5.amzn2.0.1lasso-2.5.1-5.amzn2.0.1.aarch64.rpm
Amazon Linux2i686lasso2.5.1-5.amzn2.0.1lasso-2.5.1-5.amzn2.0.1.i686.rpm
Amazon Linux2x86_64lasso2.5.1-5.amzn2.0.1lasso-2.5.1-5.amzn2.0.1.x86_64.rpm
Amazon Linux2aarch64lasso-debuginfo2.5.1-5.amzn2.0.1lasso-debuginfo-2.5.1-5.amzn2.0.1.aarch64.rpm
Amazon Linux2i686lasso-debuginfo2.5.1-5.amzn2.0.1lasso-debuginfo-2.5.1-5.amzn2.0.1.i686.rpm
Amazon Linux2x86_64lasso-debuginfo2.5.1-5.amzn2.0.1lasso-debuginfo-2.5.1-5.amzn2.0.1.x86_64.rpm
Amazon Linux2aarch64lasso-devel2.5.1-5.amzn2.0.1lasso-devel-2.5.1-5.amzn2.0.1.aarch64.rpm
Amazon Linux2i686lasso-devel2.5.1-5.amzn2.0.1lasso-devel-2.5.1-5.amzn2.0.1.i686.rpm
Amazon Linux2x86_64lasso-devel2.5.1-5.amzn2.0.1lasso-devel-2.5.1-5.amzn2.0.1.x86_64.rpm
Amazon Linux2aarch64lasso-python2.5.1-5.amzn2.0.1lasso-python-2.5.1-5.amzn2.0.1.aarch64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Jun 2021 00:00Current
7.6High risk
Vulners AI Score7.6
CVSS 25
CVSS 3.17.5
EPSS0.00639
lasso security vulnerabilityxml signature wrappingsaml responseimpersonationdata confidentialityservice availabilitycve-2021-28091updatered hatmitre
35