Lucene search
+L

4 matches found

NVD
NVD
•added 2023/06/22 7:15 p.m.•33 views

CVE-2023-34923

XML Signature Wrapping XSW in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider IP to impersonate any TOPdesk user via SAML Response manipulation...

8.1CVSS8.1AI score0.00741EPSS
SaveExploits1References2
CVE
CVE
•added 2023/06/22 12:00 a.m.•51 views

CVE-2023-34923

TOPdesk CVE-2023-34923 involves XML Signature Wrapping (XSW) in the SAML-based SSO of TOPdesk v12.10.12. The vulnerability affects the SAML Response handling and, per the description, allows attackers with valid credentials to authenticate with the Identity Provider and impersonate any TOPdesk us...

8.1CVSS7.9AI score0.00741EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/22 12:00 a.m.•0 views

CVE-2023-34923: Incorrect Authorization

XML Signature Wrapping XSW in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider IP to impersonate any TOPdesk user via SAML Response manipulation...

8.1CVSS7.5AI score0.00741EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/06/22 12:00 a.m.•46 views

CVE-2023-34923

XML Signature Wrapping XSW in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider IP to impersonate any TOPdesk user via SAML Response manipulation...

8.2AI score0.00741EPSS
SaveExploits1References2
Rows per page
Query Builder