CVE-2022-26493

🗓️ 03 Jun 2022 16:00:14Reported by drupalType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 112 Views

Xecurify's miniOrange Drupal SAML SP modules have auth bypass vul

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-26493	3 Jun 202218:15	–	attackerkb
AlpineLinux	CVE-2022-26493	3 Jun 202216:00	–	alpinelinux
Circl	CVE-2022-26493	3 Jun 202222:26	–	circl
CNNVD	Drupal 信任管理问题漏洞	3 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-26493 miniOrange SAML Authentication Bypass	3 Jun 202216:00	–	cvelist
EUVD	EUVD-2022-31051	3 Oct 202520:07	–	euvd
NVD	CVE-2022-26493	3 Jun 202218:15	–	nvd
Prion	Authorization	3 Jun 202218:15	–	prion
RedhatCVE	CVE-2022-26493	9 Jan 202608:40	–	redhatcve
Veracode	Authorization Bypass	26 Jul 202203:27	–	veracode

NVD

Node

drupal saml_sp_2.0_single_sign_onRange7.x–7.x-2.57

drupal saml_sp_2.0_single_sign_onRange8.x–8.x-2.24

[
  {
    "product": "Drupal 8 miniOrange SAML SP",
    "vendor": "Xecuify",
    "versions": [
      {
        "lessThan": "30.5",
        "status": "affected",
        "version": "miniOrange Premium",
        "versionType": "custom"
      },
      {
        "lessThan": "20.3",
        "status": "affected",
        "version": "miniOrange Standard",
        "versionType": "custom"
      },
      {
        "lessThan": "40.4",
        "status": "affected",
        "version": "miniOrange Enterprise",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Drupal 9 miniOrange SAML SP",
    "vendor": "Xecuify",
    "versions": [
      {
        "lessThan": "30.5",
        "status": "affected",
        "version": "miniOrange Premium",
        "versionType": "custom"
      },
      {
        "lessThan": "20.3",
        "status": "affected",
        "version": "miniOrange Standard",
        "versionType": "custom"
      },
      {
        "lessThan": "40.4",
        "status": "affected",
        "version": "miniOrange Enterprise",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Drupal 7 miniOrange SAML SP",
    "vendor": "Xecuify",
    "versions": [
      {
        "lessThan": "30.2",
        "status": "affected",
        "version": "miniOrange Premium",
        "versionType": "custom"
      },
      {
        "lessThan": "20.2",
        "status": "affected",
        "version": "miniOrange Standard",
        "versionType": "custom"
      },
      {
        "lessThan": "40.2",
        "status": "affected",
        "version": "miniOrange Enterprise",
        "versionType": "custom"
      }
    ]
  }
]