TLS Vulnerability in psPAS PowerShell Module Affects SAML Authentication Process

CVE-2025-59270

What is CVE-2025-59270?

The psPAS PowerShell module has a vulnerability in the 'Get-PASSAMLResponse' function that fails to enforce TLS 1.2 for SAML authentication. This oversight allows an unauthenticated attacker to position themselves in a Man-in-the-Middle attack, enabling them to manipulate the TLS handshake. Consequently, the attacker can downgrade the connection to a deprecated protocol, exposing sensitive data and compromising the security of the authentication process. To mitigate this risk, users should upgrade to version 7.0.209 or later.

References