Debian : Security Vulnerabilities, CVEs, Published In 2012 (Bypass) CVSS score >= 4

CVE-2012-2351

The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username.
Max CVSS
5.0
EPSS Score
0.22%
Published
2012-07-12
Updated
2016-12-07
1 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close