CVE-2020-1677 — Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML …
Published: 2020-10-16 · CVSS: 7.2 · CVSS 3.1
When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper Networks Mist Cloud UI versions prior to September 2 2020.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7