← Back

Adnovum

adnovum

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Nevisauth
nevisauth
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5372
1Adnovum
1Nevisauth
May 6, 2026
Sep 28, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the i...Show more
The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.Show less