Known vulnerabilities in the org.openidentityplatform.openam:openam-federation-library package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
C Improper Authentication Affected versions of this package are vulnerable to Improper Authentication due to not properly validating the signature of SAML responses received as part of the SAMLv1.x Single Sign-On process. Attackers can use this fact to impersonate any OpenAM user, including the administrator, by sending a specially crafted SAML response to the `SAMLPOSTProfileServlet` servlet. How to fix Improper Authentication? Upgrade `org.openidentityplatform.openam:openam-federation-library` to version 14.7.3 or higher.	[,14.7.3)

Improper Authentication

Affected versions of this package are vulnerable to Improper Authentication due to not properly validating the signature of SAML responses received as part of the SAMLv1.x Single Sign-On process. Attackers can use this fact to impersonate any OpenAM user, including the administrator, by sending a specially crafted SAML response to the SAMLPOSTProfileServlet servlet.

How to fix Improper Authentication?

Upgrade org.openidentityplatform.openam:openam-federation-library to version 14.7.3 or higher.

[,14.7.3)

Go back to all versions of this package