Authentication Bypass by Alternate Name

Overview Sustainsys.Saml2 is a SAML2 protocol support. Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name due to improper validation in the AcsCommandResultCreated function. An attacker can craft a SAML2 response that is processed as if issued by another...