CVE-2021-43999CWE-287

Improper validation of SAML responses

published January 11, 2022

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01784 · 78.1th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-01-11T22:10Z
EPSS history
Timeline
  • 11 JAN 22:10Z
    Improper validation of SAML responses
    cvelistv5