CVE search · CVE-2024-1735
CVE-2024-1735
critical 9.1
A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- dl_cve@linecorp.com
- Weakness
- CWE-287
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | critical 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
dl_cve@linecorp.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- linecorp · armeria