#VU97454 Improper verification of cryptographic signature in SAML SSO for Ruby - CVE-2024-45409
Published: September 18, 2024 / Updated: October 11, 2024
Vulnerability identifier: #VU97454
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: CVE-2024-45409
CWE-ID: CWE-347
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerable software:
SAML SSO for Ruby
SAML SSO for Ruby
Software vendor:
SAML-Toolkits
SAML-Toolkits
Description
The vulnerability allows a remote attacker to bypass SAML authentication.
The vulnerability exists due to the library does not properly verify the signature of the SAML Response. A remote non-authenticated attacker with access to any signed SAML document (by the IdP) can forge a SAML Response/Assertion with arbitrary contents, bypass authentication process and login under an arbitrary account within the application.
Successful exploitation of the vulnerability may allow an attacker to compromise the affected application.
Remediation
Install updates from vendor's website.