Improper verification of cryptographic signature in SAML SSO for Ruby - CVE-2024-45409
Published: September 18, 2024 / Updated: October 11, 2024
Vulnerability identifier: #VU97454
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: CVE-2024-45409
CWE-ID: CWE-347
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vendor: SAML-Toolkits
Affected software:
SAML SSO for Ruby
SAML SSO for Ruby
Detailed vulnerability description
The vulnerability allows a remote attacker to bypass SAML authentication.
The vulnerability exists due to the library does not properly verify the signature of the SAML Response. A remote non-authenticated attacker with access to any signed SAML document (by the IdP) can forge a SAML Response/Assertion with arbitrary contents, bypass authentication process and login under an arbitrary account within the application.
Successful exploitation of the vulnerability may allow an attacker to compromise the affected application.
How to mitigate CVE-2024-45409
Install updates from vendor's website.