Lucene search
44B92078-AA38-54DE-868C-A87FB237583AHistoryOct 31, 2022 - 1:24 p.m.
Exploit for Improper Verification of Cryptographic Signature in Passport-Saml Project Passport-Saml
2022-10-3113:24:34
409
passport-saml
saml sso
cve-2022-39299
multi-tenant apps
authentication bypass
xml signature
remote attacker
doyensec
proof of concept
poc generator
validatepostresponse function
passport-saml-2.0.0
xml parser
xpath
authentication logic
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.009
Percentile
83.1%
Exploiting CVE-2022-39299
Signature bypass via multiple ro…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
osv
osv
CVE-2022-39299
2022-10-12 21:15:09
Signature bypass via multiple root elements
2022-10-12 22:05:41
xmldom allows multiple root nodes in a DOM
2022-11-01 17:29:11
prion
prion
Authentication flaw
2022-10-12 21:15:00
Design/Logic Flaw
2022-11-02 17:15:00
ibm
ibm
nvd
nvd
CVE-2022-39299
2022-10-12 21:15:09
CVE-2022-39353
2022-11-02 17:15:17
cve
cve
CVE-2022-39299
2022-10-12 21:15:09
CVE-2022-39353
2022-11-02 17:15:17
github
github
Signature bypass via multiple root elements
2022-10-12 22:05:41
xmldom allows multiple root nodes in a DOM
2022-11-01 17:29:11
veracode
veracode
Improper Verification Of Cryptographic Signature
2022-10-14 11:00:44
cvelist
cvelist
CVE-2022-39299 Signature bypass via multiple root elements in Passport-SAML
2022-10-12 00:00:00
CVE-2022-39353 xmldom allows multiple root nodes in a DOM
2022-11-02 00:00:00
ubuntucve
ubuntucve
CVE-2022-39353
2022-11-02 00:00:00
debiancve
debiancve
CVE-2022-39353
2022-11-02 17:15:17
redhatcve
redhatcve
CVE-2022-39353
2022-11-14 03:56:39
openvas
openvas
Debian: Security Advisory (DLA-3260-1)
2023-01-02 00:00:00
nessus
nessus
Debian DLA-3260-1 : node-xmldom - LTS security update
2023-01-07 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : xmldom vulnerabilities (USN-6102-1)
2023-05-24 00:00:00
debian
debian
[SECURITY] [DLA 3260-1] node-xmldom security update
2023-01-01 17:00:48
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.009
Percentile
83.1%
Related for 44B92078-AA38-54DE-868C-A87FB237583A