CVE-2015-5372

Published: Sep 28, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.

Affected (1)

Products: Adnovum: Nevisauth

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adnovum Nevisauth	Up to 4.18.3.0

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (10)

http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth

Source: cve@mitre.org

http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/Sep/87

Source: cve@mitre.org

http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/536508/100/0/threaded

Source: cve@mitre.org

http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2015/Sep/87

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/536508/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.