Security Advisory

CVE-2021-43999

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-01-11 22:10:12

Last updated 2024-08-04 04:10:17

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.

← Browse all CVEs View on cve.org ↗