Description
The web application uses SAML. The web application's SAML Consumer Service doesn't check SAML Response signature.
An authenticated attacker may be able to use it to escalate privileges to a high privileged user or to takeover accounts of other users in the application.
Remediation
Change configuration of the SAML service to require a valid signature for SAML Response
References
Related Vulnerabilities
WordPress Plugin WP Data Access Privilege Escalation (5.3.7)
WordPress Plugin PowerPack Pro for Elementor Privilege Escalation (2.10.14)
JIRA Security Advisory 2012-08-28
Vulnerabilities in SharePoint could allow elevation of privilege
WordPress Plugin MasterStudy LMS-for Online Courses and Education Privilege Escalation (3.3.1)