Inverse Sogo vulnerabilities

1 known vulnerability affecting inverse/sogo.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-33054HIGHCVSS 7.5≥ 2.0.6, < 2.4.1≥ 3.0.0, < 5.1.12021-06-04

CVE-2021-33054 [HIGH] CWE-347 CVE-2021-33054: SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)