Vulnerability · Published Mar 25, 2020 · Assigned by GitHub_M
CVE-2020-5261Missing Token Replay Detection
High 8.2
In plain English
A high-severity security flaw in Saml2 from Sustainsys. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Saml2 Authentication services for ASP.NET (NuGet package Sustainsys.Saml2) greater than 2.0.0, and less than version 2.5.0 has a faulty implementation of Token Replay Detection. Token Replay Detection is an important defence in depth measure for Single Sign On solutions. The 2.5.0 version is patched. Note that version 1.0.1 is not affected. It has a correct Token Replay Implementation and is safe to use. Saml2 Authentication services for ASP.NET (NuGet package Sustainsys.Saml2) greater than 2.0.0, and less than version 2.5.0 have a faulty implementation of Token Replay Detection. Token Replay Detection is an important defense measure for Single Sign On solutions. The 2.5.0 version is patched. Note that version 1.0.1 and prior versions are not affected. These versions have a correct Token Replay Implementation and are safe to use.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| NuGet | sustainsys.saml2 | 2.5.0 | GHSA-g6j2-ch25-5mmv |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sustainsys | Saml2 | >= 2.0.0, < 2.5.0 |
Weakness: CWE-294 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
References
- https://github.com/Sustainsys/Saml2/security/advisories/GHSA-g6j2-ch25-5mmv x_refsource_CONFIRM
- https://github.com/Sustainsys/Saml2/commit/e58e0a1aff2b1ead6aca080b7cdced55ee6d5241 x_refsource_MISC
- https://github.com/Sustainsys/Saml2/issues/711 x_refsource_MISC