Lucene search

Armeria SAML authentication bypass due to missing validation on unsigned SAML messages

🗓️ 26 Feb 2024 20:37:04Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Armeria SAML authentication bypass in unsigned message

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Armeria SAML authentication bypass due to missing validation on unsigned SAML messages	26 Feb 202420:04	–	github
Vulnrichment	CVE-2024-1735	26 Feb 202407:25	–	vulnrichment
CVE	CVE-2024-1735	26 Feb 202416:27	–	cve
Veracode	Authentication Bypass	27 Feb 202409:41	–	veracode
Veracode	Missing Critical Step In Authentication	3 Mar 202419:04	–	veracode
Prion	Authentication flaw	26 Feb 202416:27	–	prion
Cvelist	CVE-2024-1735	26 Feb 202407:25	–	cvelist
NVD	CVE-2024-1735	26 Feb 202416:27	–	nvd

Source	Link
github	www.github.com/line/armeria/security/advisories/GHSA-4m6j-23p2-8c54
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-1735
github	www.github.com/line/armeria/commit/b2aa9f49b46a7b0e03d8b8d753809cd1e8e2016c
github	www.github.com/line/armeria
github	www.github.com/line/armeria/blob/0efc776988d71be4da6e506ec8a33c2b7b43f567/saml/src/main/java/com/linecorp/armeria/server/saml/SamlMessageUtil.java
github	www.github.com/line/armeria/releases/tag/armeria-1.27.2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Feb 2024 20:04Current

6.7Medium risk

Vulners AI Score6.7

CVSS39.1

EPSS0.0004

SSVC