Vulnerability · Published Jan 11, 2022 · Assigned by apache
CVE-2021-43999Improper validation of SAML responses
High 8.8
In plain English
A high-severity improper authentication in Apache Guacamole from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)1.8%top 20.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | guacamole-server | no fix listed | UBUNTU-CVE-2021-43999 |
| Ubuntu:24.04:LTS | guacamole-server | no fix listed | UBUNTU-CVE-2021-43999 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache Guacamole | 1.3.01.2.0 |
Weakness: CWE-287
References
- https://lists.apache.org/thread/4dt9h5mo4o9rxlgxm3rp8wfqdtdjn2z9 x_refsource_MISC
- [oss-security] 20220111 [SECURITY] CVE-2021-43999: Apache Guacamole: Improper validation of SAML responses mailing-list, x_refsource_MLIST