The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2015-08-17T20:00:00

Updated: 2024-08-06T04:03:10.883Z

Reserved: 2014-11-18T00:00:00

Link: CVE-2015-0277

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-08-17T20:59:00.107

Modified: 2023-11-07T02:23:22.433

Link: CVE-2015-0277

cve-icon Redhat

Severity : Important

Publid Date: 2015-04-14T00:00:00Z

Links: CVE-2015-0277 - Bugzilla