Hpe Icewall Products
Monthly
Unauthenticated remote denial-of-service in HPE IceWall Federation Agent and Proxy allows a network attacker to crash or render unavailable the identity federation and authentication proxy service. The root cause is improper handling of incorrect data types (CWE-241), meaning the software fails to gracefully reject or process malformed input, triggering an availability failure. No active exploitation or public exploit code has been identified at time of analysis.
SAML response tampering in HPE IceWall identity and access management products enables a low-privileged attacker to forge authentication assertions and impersonate arbitrary users across federated SSO sessions. The flaw (CWE-347) reflects improper cryptographic signature verification on SAML responses, meaning a tampered assertion can be accepted as legitimate by the IceWall service provider. No public exploit has been identified at time of analysis, but the low attack complexity and fully network-accessible attack surface make this a high-priority remediation for any organization running IceWall-based SSO.
Unauthenticated remote denial-of-service in HPE IceWall Federation Agent and Proxy allows a network attacker to crash or render unavailable the identity federation and authentication proxy service. The root cause is improper handling of incorrect data types (CWE-241), meaning the software fails to gracefully reject or process malformed input, triggering an availability failure. No active exploitation or public exploit code has been identified at time of analysis.
SAML response tampering in HPE IceWall identity and access management products enables a low-privileged attacker to forge authentication assertions and impersonate arbitrary users across federated SSO sessions. The flaw (CWE-347) reflects improper cryptographic signature verification on SAML responses, meaning a tampered assertion can be accepted as legitimate by the IceWall service provider. No public exploit has been identified at time of analysis, but the low attack complexity and fully network-accessible attack surface make this a high-priority remediation for any organization running IceWall-based SSO.