Skip to content
OpenAdvisories

Vendor

Sustainsys

3 known vulnerabilities.

Products

Saml2 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2020-5268

    Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET

    In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to …

    Sustainsys Saml2 Sustainsys.Saml2 NuGet