Auth bypass in Adnovum Nevisauth

CVE-2015-5372

The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.

Vulnerability class: Broken Authentication

EPSS: 0.009 (55.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2015-5372?
CVE-2015-5372 is a vulnerability in Adnovum Nevisauth, classified under Improper Authentication. Published 2015-09-28.
Is CVE-2015-5372 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.