The vulnerability of the authentication method for the SOGo collaborative work system, which stems from incorrect verification of the cryptographic signature of data, allows attackers to compromise the integrity of the data.

SOGo authentication flaw due to improper cryptographic signature verification, risking data integrity.

Reporter	Title	Published	Views	Family All 30
FreeBSD	SOGo -- SAML user authentication impersonation	1 Jun 202100:00	–	freebsd
Akamai Blog	SAML Implementation Vulnerability Impacting Some Akamai Services	1 Jun 202113:00	–	akamaiblog
Akamai Blog	SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities	1 Jun 202113:00	–	akamaiblog
CNNVD	SOGo 数据伪造问题漏洞	4 Jun 202100:00	–	cnnvd
CVE	CVE-2021-33054	4 Jun 202114:40	–	cve
Cvelist	CVE-2021-33054	4 Jun 202114:40	–	cvelist
Debian	[SECURITY] [DLA 2707-1] sogo security update	12 Jul 202120:00	–	debian
Debian	[SECURITY] [DSA 5029-1] sogo security update	22 Dec 202113:59	–	debian
Debian CVE	CVE-2021-33054	4 Jun 202114:40	–	debiancve
Tenable Nessus	Debian DLA-2707-1 : sogo - LTS security update	13 Jul 202100:00	–	nessus

Vulners

Node

inverse sogoRange2.0.6–2.4.1

inverse sogoRange3.0.0–5.1.1

Source	Link
github	www.github.com/inverse-inc/sogo/blob/master/CHANGELOG.md
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33054
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-33054
altsp	www.altsp.su/obnovleniya-bezopasnosti/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.4.2/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/
web	www.web.nvd.nist.gov/view/vuln/detail

03 Apr 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 37.5

EPSS0.00987