Vulnerability · Published Jun 9, 2021 · Assigned by mitre
CVE-2021-3196
High 8.8
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Official description
An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user.
Affected products (as reported)
References
- https://www.hitachi.com/hirt/security/index.html x_refsource_MISC
- https://www.hitachi.com/hirt/hitachi-sec/2021/601.html x_refsource_CONFIRM
- https://www.hitachi-id.com/cve-2021-3196-attackers-can-impersonate-another-user x_refsource_CONFIRM