CoreCVE
Back

MEDIUM

PicketLink: SP does not take Audience condition of a SAML assertion into account

Published Aug 17, 2015

Description

The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-284

CWE-305

References (9)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Aug 17, 2015
Updated Aug 6, 2024
Reserved Nov 18, 2014
Link CVE-2015-0277
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2015-0277
Red Hat
Severity Important
Public date Apr 14, 2015
Links CVE-2015-0277 - Bugzilla