Authentication Bypass

2022-12-1403:21:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

passport-wsfed-saml2

authentication bypass

retrievetoken function

vulnerability

ws-fed

EPSS

0.002

Percentile

57.8%

JSON

passport-wsfed-saml2 is vulnerable to authentication bypass. The vulnerability exists in the retrieveToken function of wsfederation.js due to a lack of proper validation when more than one assertion is inside a token response for WS-Fed, which allows an attacker to bypass WSFed authentication.