Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DoS via SAML configuration in Guardian/CMC before 22.6.2
Vulnerability Description
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
CWE-1286
Vulnerability Title
Nozomi Networks Guardian 安全漏洞
Vulnerability Description
Nozomi Networks Guardian是美国Nozomi Networks公司的一款物联网设备和软件检查系统。 Nozomi Networks Guardian 存在安全漏洞，该漏洞源于经过身份验证的管理员可以上传一个格式错误的 SAML 配置文件，而应用程序没有正确检查文件的格式。攻击者利用该漏洞可以造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A