Skip to main content

Sustainsys

3 CVEs vendor

Monthly

CVE-2023-41890 Sep 19, 15:15 NuGet HIGH PATCH This Week

Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, allowing the web site to act as a SAML2 Service Provider. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Saml2 Sustainsys
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2020-5268 Apr 21, 17:15 NuGet HIGH PATCH This Week

In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Saml2 Sustainsys
NVD GitHub
CVSS 3.1
7.3
EPSS
1.1%
CVE-2020-5261 Mar 25, 02:15 NuGet MEDIUM PATCH This Month

Saml2 Authentication services for ASP.NET (NuGet package Sustainsys.Saml2) greater than 2.0.0, and less than version 2.5.0 has a faulty implementation of Token Replay Detection. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Information Disclosure Saml2 Sustainsys
NVD GitHub
CVSS 3.1
6.8
EPSS
1.2%
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, allowing the web site to act as a SAML2 Service Provider. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Saml2 Sustainsys
NVD GitHub
EPSS 1% CVSS 7.3
HIGH PATCH This Week

In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Saml2 Sustainsys
NVD GitHub
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

Saml2 Authentication services for ASP.NET (NuGet package Sustainsys.Saml2) greater than 2.0.0, and less than version 2.5.0 has a faulty implementation of Token Replay Detection. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Information Disclosure Saml2 Sustainsys
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy