Skip to content
OpenAdvisories
Low · 3.1 CVE-2025-59270 EUVD-2025-29615GHSA-9f77-473j-cjg2

psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

Published Sep 16, 2025 · Updated Sep 30, 2025 · Assigned by cisa-cg

Description

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.209.

Affected products

VendorProductAffectedFixed
pspete psPAS 6.4.85 – < 7.0.209 7.0.209

Advisories 1

References