CVE-2021-43999: Improper Authentication

January 11, 2022 (updated January 14, 2022)

Apache Guacamole do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.

References

www.openwall.com/lists/oss-security/2022/01/11/7
lists.apache.org/thread/4dt9h5mo4o9rxlgxm3rp8wfqdtdjn2z9
nvd.nist.gov/vuln/detail/CVE-2021-43999

Code Behaviors & Features

Detect and mitigate CVE-2021-43999 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →