The vulnerability originates from insecure storage of sensitive information within the Drupal SAML SSO - Service Provider module. It permits the extraction of embedded sensitive data, leading to potential data leakage and compromise of confidential information.

Affected systems include the Drupal SAML SSO - Service Provider module across versions from 0.0.0 up to 3.2.0. Administrators must verify the presence of the module and check its version.

The CVSS score of 3.8 indicates a low to moderate severity, but the flaw still permits direct disclosure of sensitive data. The EPSS score of less than 1% and the lack of inclusion in the KEV catalog suggest that public exploitation is unlikely. However, an attacker who can read the Drupal instance or the module’s configuration files can retrieve the embedded sensitive data. The likely attack vector is inferred to require legitimate access to the Drupal site's file system or configuration files to read the stored information.