CVE-2008-3891

2008-09-0314:00:00

mitre

www.cve.org

saml single sign-on

google apps

user impersonation

authentication responses

AI Score

Confidence

Low

EPSS

0.001

Percentile

46.1%

JSON

The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field.

References

www.kb.cert.org/vuls/id/612636

www.kb.cert.org/vuls/id/MIMG-7FQGWU