by Kastro
Paper/Archive/CVE-2022-26493

CVE-2022-26493

Xecuify Drupal 8 miniOrange SAML SP — miniOrange SAML Authentication Bypass

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 48.5.485 × 209.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability. An attacker with access to a HTTP-request intercepting method is able to bypass authentication and authorization by removing the SAML Assertion Signature - impersonating existing users and existing roles, including administrative users/roles. This vulnerability is not mitigated by configuring the module to enforce signatures or certificate checks. Xecurify recommends updating miniOrange modules to their most recent versions. This vulnerability is present in paid versions of the miniOrange Drupal SAML SP product affecting Drupal 7, 8, and 9.

Affected

ProductAffectedFixed inSource
Drupal 8 miniOrange SAML SPminiOrange Premium – < 30.530.5CNA
Drupal 8 miniOrange SAML SPminiOrange Standard – < 20.320.3CNA
Drupal 8 miniOrange SAML SPminiOrange Enterprise – < 40.440.4CNA
Drupal 9 miniOrange SAML SPminiOrange Premium – < 30.530.5CNA
Drupal 9 miniOrange SAML SPminiOrange Standard – < 20.320.3CNA
Drupal 9 miniOrange SAML SPminiOrange Enterprise – < 40.440.4CNA
Drupal 7 miniOrange SAML SPminiOrange Premium – < 30.230.2CNA
Drupal 7 miniOrange SAML SPminiOrange Standard – < 20.220.2CNA
Drupal 7 miniOrange SAML SPminiOrange Enterprise – < 40.240.2CNA

Scores by source

drupal (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refrafarmerjr1.github.io/2022/06/13/SAML-miniOrange.html