Project: 
SAML SP 2.0 Single Sign On (SSO) - SAML Service Provider
Date: 
2021-September-22
Security risk: 
Moderately critical 14∕25 AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Uncommon
Vulnerability: 
Multiple vulnerabilities
Affected versions: 
<2.24.0
Description: 

This module provides a solution to authenticate visitors using existing SAML providers.

Certain non-default configurations allow a malicious user to login as any chosen user.

The vulnerability is mitigated by the module's default settings which require the options "Either sign SAML assertions" and "x509 certificate".

Solution: 

Ensure that the "Either SAML response or SAML assertion must be signed" and "x509 certificate" options on the dedicated plugin page are both enabled.

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: