CVE-2020-1676 — Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability.
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without i…
Published: 2020-10-16 · CVSS: 7.2 · CVSS 3.1
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7