SAML Token Signature Bypass

2023-10-2913:19:59

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

saml token

signature bypass

open-vm-tools

attacker

file

website

vmware tools

authentication

unauthorized access

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.0%

JSON

open-vm-tools is vulnerable to SAML Token Signature Bypass. An attacker could exploit this vulnerability by tricking a user into opening a specially crafted file or visiting a malicious website. The file or website would contain a specially crafted SAML token that would exploit the flaw in VMware Tools to bypass the signature verification process. The attacker could then use the token to authenticate to the virtual machine and gain unauthorized access.

CPENameOperatorVersion
open-vm-tools:sideq2:11.2.0-1
open-vm-tools:sideq2:11.2.5-2
open-vm-tools:bullseyeeq2:11.2.0-1
open-vm-tools:bustereq2:10.3.10-1+deb10u2
open-vm-tools:sideq2:11.2.0-1
open-vm-tools:sideq2:11.2.5-2
open-vm-tools:bullseyeeq2:11.2.0-1
open-vm-tools:bustereq2:10.3.10-1+deb10u2

Name	Operator	Version
open-vm-tools:sid	eq	2:11.2.0-1
open-vm-tools:sid	eq	2:11.2.5-2
open-vm-tools:bullseye	eq	2:11.2.0-1
open-vm-tools:buster	eq	2:10.3.10-1+deb10u2
open-vm-tools:sid	eq	2:11.2.0-1
open-vm-tools:sid	eq	2:11.2.5-2
open-vm-tools:bullseye	eq	2:11.2.0-1
open-vm-tools:buster	eq	2:10.3.10-1+deb10u2