CyberRota Analysis
AI-GeneratedThe vulnerability in passport-saml-encrypted versions up to 0.1.13 allows attackers to bypass authentication by exploiting conditional SAML signature verification, which relies on an optional certificate setting. This enables the submission of unsigned SAML responses, granting unauthorized access to authenticated user profiles with arbitrary attributes. Organizations using this library for SAML authentication should prioritize immediate remediation to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID and attributes to the assertion consumer service endpoint to receive authenticated profiles without valid signatures.