CVE-2020-27846: CVE-2020-27846

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-27846

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

输入的错误解释

Source: NVD (National Vulnerability Database)

Vulnerability Title

Crewjam Saml 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Crewjam Saml是Crewjam个人开发者的一个基于Go语言实现的可与Saml格式文件进行交互的代码库。 crewjam saml 存在安全漏洞，该漏洞源于DescriptionA signature verification，这个缺陷允许攻击者可利用该漏洞绕过SAML身份验证。来自此漏洞的最大威胁是机密性、完整性以及系统可用性。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	crewjam/saml	grafana-7.3.6, grafana-7.2.3, grafana-6.7.5, github.com/crewjam/saml-0.4.3	-

II. Public POCs for CVE-2020-27846

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2020-27846

Please Login to view more intelligence information

https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/x_refsource_MISC
https://security.netapp.com/advisory/ntap-20210205-0002/x_refsource_CONFIRM
https://grafana.com/blog/2020/12/17/grafana-6.7.5-7.2.3-and-7.3.6-released-with-important-security-fix-for-grafana-enterprise/x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1907670x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YUTKIRWT6TWU7DS6GF3EOANVQBFQZYI/vendor-advisoryx_refsource_FEDORA
https://nvd.nist.gov/vuln/detail/CVE-2020-27846

IV. Related Vulnerabilities

Same vendor: n/a

Same weakness: CWE-115

V. Comments for CVE-2020-27846

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2020-27846

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2020-27846

III. Intelligence Information for CVE-2020-27846

IV. Related Vulnerabilities

V. Comments for CVE-2020-27846

Leave a comment