What is the CVSS score of CVE-2020-27846?

CVE-2020-27846 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 4.9%.

Is there a public PoC exploit available for CVE-2020-27846?

Yes, a public proof-of-concept exploit is available for CVE-2020-27846. Prioritise patching immediately. EPSS: 4.9%.

Is there a patch available for CVE-2020-27846?

Yes, a patch is available for CVE-2020-27846. Update the affected software to the latest version immediately.

Saml CVE-2020-27846

CRITICAL

Misinterpretation of Input (CWE-115)

2020-12-21 secalert@redhat.com

Authentication Bypass Red Hat Grafana Enterprise Linux Fedora Openshift Container Platform Openshift Service Mesh Saml Fedoraproject Saml Project

9.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-115 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V1 - Encoding and Sanitization Output interpretation safety
Impact	CVSS score of 9.8 (CRITICAL). Attack characteristics: network attack vector, low complexity, no privileges required, no user interaction not required. Public proof-of-concept exploit code is available.
Exploit ScenarioDerived	This vulnerability can be exploited remotely over the network. Successful exploitation could compromise the critical-severity affected system.

Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.

Patch available 4.9% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAI

A signature verification vulnerability exists in crewjam/saml. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Affected Packages

go github.com/crewjam/saml fix: 0.4.3

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in go

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

This vulnerability is classified under CWE-115. A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Affected products include: Grafana, Saml Project Saml, Redhat Openshift Container Platform, Redhat Openshift Service Mesh, Redhat Enterprise Linux.

Know when Saml gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

DescriptionNVD

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Threat Intelligence Overview

EPSS Score

4.9%

Top 9% exploitable

Exploit

POC

Public exploit code exists

Data Quality

3 sources

Confidence: Low

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 4.9%

Patch available Yes

Active threat No

Deciding rule

CRITICAL severity + public POC available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Yes

Human Impact· derived

Medium

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +5

CVSS: +49

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Authentication Bypass CRITICAL

Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.

Affected Products (CPE)NVD

cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*

cpe:2.3:a:saml_project:saml:*:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift_service_mesh:2.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

More in Saml

View all

CVE-2026-88920 CRITICAL Act Now

9.8 Sep 30

Unauthenticated remote attackers can bypass authentication in Apache WSS4J (4.0.0 before 4.0.2, 3.0.0 before 3.0.6, and

CVE-2026-78623 CRITICAL Act Now

9.9 Sep 08

SQL injection in Okta Access Gateway versions prior to 2026.9.1 allows a participant in the SAML federation/authenticati

CVE-2022-45597 CRITICAL Act Now

9.8 Mar 24

ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. Rated critical severity (CVSS 9.8), this vulnerability is

CVE-2023-29129 CRITICAL Act Now

9.8 Jun 13

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAM

CVE-2022-41912 CRITICAL Act Now

9.8 Nov 28

The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML respon

CVE-2022-44457 CRITICAL Act Now

9.8 Nov 08

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7

CVE-2022-37011 CRITICAL Act Now

9.8 Sep 13

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8

CVE-2021-21678 HIGH This Week

8.8 Aug 31

Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target

CVE-2021-33712 HIGH This Week

8.8 Jun 08

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). Rated high severity (CVSS 8.8), this

CVE-2026-102899 HIGH This Week

7.6 Oct 14

Improper authentication in the SAML SSO identity-linking flow of self-hosted Sentry 26.5.0 through 26.7.1 lets an attack

CVE-2026-78425 HIGH This Week

7.6 Sep 17

SAML SSO authentication bypass in SUSE NeuVector lets anyone who legitimately holds an account on another application be

CVE-2025-64131 HIGH This Week

7.5 Oct 29

Authentication replay in the Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier allows an attacker who can obtain a le

Same weakness CWE-115 – Misinterpretation of Input

View all

CVE-2022-3224 MEDIUM POC

6.1

CVE-2022-1233 MEDIUM POC

6.1

CVE-2021-1587 HIGH

8.6

CVE-2018-12116 HIGH

7.5

CVE-2023-0880 MEDIUM POC

4.3

CVE-2026-73798 HIGH

8.2

CVE-2025-5747 HIGH

8.0

CVE-2025-32908 HIGH

7.5

Same technique Authentication Bypass

View all

CVE-2015-3306 CRITICAL POC

10.0

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2022-40684 CRITICAL POC

9.8

CVE-2025-61882 CRITICAL POC

9.8

CVE-2024-0012 CRITICAL POC

9.3

References

Advisories & patches

PATCH https://bugzilla.redhat.com/show_bug.cgi?id=1907670 ADVISORY https://grafana.com/blog/2020/12/17/grafana-6.7.5-7.2.3-and-7.3.6-released-with-important-security-fix-for-grafana-enterprise/ REF https://github.com/crewjam/saml/security/advisories/GHSA-4hq8-gmxx-h6w9 REF https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YUTKIRWT6TWU7DS6GF3EOANVQBFQZYI/ REF https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICP3YRY2VUCNCF2VFUSK77ZMRIC77FEM/ REF https://security.netapp.com/advisory/ntap-20210205-0002/

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back