Skip to content
OpenAdvisories

Vendor

fleetdm

41 known vulnerabilities.

Products

fleet 41
All Critical High Medium Low Exploited only Public exploit

41 results · Feed

  • Critical 10.0
    CVE-2020-26276

    SAML authentication vulnerability in Fleet

    Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may be mutated by an attacker to modify the trusted document. This can result in allowing unverified logins from …

    fleetdm fleet github.com/fleetdm/fleet/v4 Go