CVE-2008-3891

Google Apps - Auth Bypass

Title source: llm

Description

The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field.

Scores

EPSS 0.0018
EPSS Percentile 39.8%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

google/google_apps

Timeline

Published Sep 03, 2008
Tracked Since Feb 18, 2026