CVE-2024-4332: Incorrect Implementation of Authentication Algorithm

An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise TE 9.1.0 when TE is configured to use LDAP/Active Directory SAML authentication and its optional "Auto-synchronize LDAP Users, Roles, and Groups" feature is enabled. This...

PT-2024-4057

Name of the Vulnerable Software and Affected Versions: Tripwire Enterprise version 9.1.0 Description: An authentication bypass issue has been identified in the REST and SOAP API components of Tripwire Enterprise when configured to use LDAP/Active Directory SAML authentication and its optional...