CyberRota Analysis
AI-GeneratedCoreWCF versions prior to 1.8.1 and 1.9.1 are vulnerable due to inadequate enforcement of SubjectConfirmation method URIs and holder-of-key proof keys in the SamlSecurityTokenHandler, potentially allowing unauthorized authentication through holder-of-key downgrade or custom confirmation assertions. This vulnerability poses a significant risk to applications relying on SAML token validation for secure authentication. Organizations utilizing affected versions should prioritize upgrading to the patched versions to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token validation does not enforce SubjectConfirmation method URIs or holder-of-key proof keys in SamlSecurityTokenHandler, allowing holder-of-key downgrade or custom confirmation method assertions to authenticate a subject without proving authority over the assertion. This issue is fixed in versions 1.8.1 and 1.9.1.