CVE-2015-5372

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.87%

Published

Sep 28, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate.

Weaknesses (CWE)

CWE-287

Affected Products (1)

adnovum · nevisauthvulnerable

References (10)

http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth

http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html

http://seclists.org/fulldisclosure/2015/Sep/87

http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt

http://www.securityfocus.com/archive/1/536508/100/0/threaded

http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth

http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html

http://seclists.org/fulldisclosure/2015/Sep/87

http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt

http://www.securityfocus.com/archive/1/536508/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs