Description

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Remediation

References

CVE-2020-27846

Related Vulnerabilities

WordPress Plugin Malware Scanner Privilege Escalation (4.7.2)

WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cross-Site Request Forgery (3.0.8)

WordPress Plugin Badge Designer Lite For WooCommerce includes Backdoor [Only if downloaded via the vendor website] (1.1.0)

WordPress Plugin Japanized For WooCommerce Cross-Site Scripting (2.5.6)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7233)

Severity

Critical

Classification

CVE-2020-27846 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities