Improper Verification of Cryptographic Signature in passport-saml - CVE-2022-39299

Vulnerability details

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to application does not properly control consumption of internal resources. A remote attacker can use an arbitrary IDP signed XML element to bypass SAML authentication on a website using passport-saml

Affected software

How to mitigate CVE-2022-39299

Links to Public Exploits and PoC-codes

• Exploit #11134 - CVE-2022-39299_PoC_Generator (A Simple CVE-2022-39299 PoC exploit generator to bypass authentication in SAML SSO Integrations using vulnerable versions of passport-saml) (February 12, 2025)

External References

• https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7
• https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e
• http://packetstormsecurity.com/files/169826/Node-saml-Root-Element-Signature-Bypass.html

Related Security Bulletins

• Improper verification of cryptographic signature in Passport-SAML
• Improper verification of cryptographic signature in IBM Cloud Pak for Data