CVE-2021-43999CWE-287

CVE-2021-43999: falha em Apache Guacamole

Improper validation of SAML responses

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apache Guacamole

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.8%
Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.
Produtos afetados
Apache Software Foundation · Apache Guacamole
CVEs relacionadas — Apache Guacamole

No mesmo produto, das mais perigosas para as menos.

CVE-2018-1340—CVE-2018-1340EPSS 2.0%CVE-2021-41767—Private tunnel identifier may be included in the non-private details of active connectionsEPSS 2.0%CVE-2017-3158—CVE-2017-3158EPSS 1.2%CVE-2023-30576MEDIUMApache Guacamole: Use-after-free in handling of RDP audio input bufferEPSS 1.1%CVE-2023-30575MEDIUMApache Guacamole: Incorrect calculation of Guacamole protocol element lengthsEPSS 1.0%CVE-2023-43826HIGHApache Guacamole: Integer overflow in handling of VNC image buffersEPSS 0.9%