Improper validation of SAML responses
CVE-2021-43999

8.8HIGH

Key Information:

Vendor
Apache
Status
Apache Guacamole
Vendor
CVE Published:
11 January 2022

Summary

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.

Affected Version(s)

Apache Guacamole 1.3.0

Apache Guacamole 1.2.0

References

https://lists.apache.org/thread/4dt9h5mo4o9rxlgxm3rp8wfqd...
x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/01/11/7
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

We would like to thank Finn Steglich (ETAS) for reporting this issue.
.