CVE-2015-6254 Security feature bypass in n/a
Attackers can bypass SAML destination validation in PicketLink, potentially allowing unauthorized access or assertion replay attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-6254?
CVE-2015-6254 is a medium-severity vulnerability in n/a, published on 17 Aug 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-0277 per ADT2 due to different vulnerability types.
Weakness: CWE-17
Which versions are affected by CVE-2015-6254?
It affects 1 product.
Products include Picketlink Picketlink.
How do I fix CVE-2015-6254?
Upgrade to a fixed version.
Is CVE-2015-6254 being exploited?
There is no known exploitation of CVE-2015-6254 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cc8r-2q55-6c87.