CyberRota Analysis
AI-GeneratedCoreWCF versions prior to 1.8.1 and 1.9.1 are vulnerable due to improper validation of SAML token issuer signing keys, which can allow unauthenticated remote attackers to impersonate legitimate users. This critical vulnerability poses a severe risk to applications relying on federated bindings for authentication. Organizations using affected versions of CoreWCF should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML 1.1 and SAML 2.0 token validation does not correctly resolve the issuer signing key or require signed tokens when IdentityConfiguration is used with federated bindings, allowing an unauthenticated remote attacker to impersonate any principal the trusted STS could issue. This issue is fixed in versions 1.8.1 and 1.9.1.