Showing 3 vulnerabilities on this page for passport-wsfed-saml2

Signals CISA KEV Ransomware Nuclei
auth0 vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. Users are affected specifically when the service provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. V

CWE-287CWE-290May 6, 2025
CVSS8.6v4.0EPSS0.358%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by crafting a SAMLResponse. This can be done by using a valid SAML object that was signed by the configured IdP. Users are affected specifically when the service provider is using passport-wsfed-saml2 and a valid SAML document signed by the Identity Provider can

CWE-287CWE-347May 6, 2025
CVSS9.3v4.0EPSS0.405%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication

Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport. In versions prior to 4.6.3, a remote attacker may be able to bypass WSFed authentication on a website using passport-wsfed-saml2. A successful attack requires that the attacker is in possession of an arbitrary IDP signed assertion. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be trigge

CWE-287Dec 13, 2022
CVSS5.3v3.1EPSS0.751%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX