Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47089
HistoryMay 21, 2024 - 10:06 a.m.

Authentication Bypass Via Signature Wrapping

2024-05-2110:06:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
onelogin
php-saml
authentication bypass
signature validation
malicious user

7 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

onelogin/php-saml is vulnerable to Authentication Bypass. The vulnerability is due to improper signature validation, which allows a malicious user to bypass authentication through signature wrapping.

7 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Related for VERACODE:47089