Description
Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, and Kiuwan SAST on-premise (KOP) was affected before 2.8.2509.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kiuwan | SAST | <2.8.2509.4 | — |
References
- https://r.sec-consult.com/kiuwanlock third-party-advisory