{"id":119872,"date":"2024-09-19T21:43:01","date_gmt":"2024-09-19T19:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ruby-saml-pozvolyayushhaya-obojti-autentifikacziyu-v-gitlab"},"modified":"2024-09-19T21:43:01","modified_gmt":"2024-09-19T19:43:01","slug":"uyazvimost-v-ruby-saml-pozvolyayushhaya-obojti-autentifikacziyu-v-gitlab","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-ruby-saml-pozvolyayushhaya-obojti-autentifikacziyu-v-gitlab","title":{"rendered":"Ruby-SAML-is esinev haavatavus, mis v\u00f5imaldab GitLabi autentimist \u00fcletada.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
On avaldatud korrigeerivad uuendused GitLab'i koost\u00f6\u00f6platvormile \u2014 17.3.3, 17.2.6 ja 17.1.8, milles on k\u00f5rvaldatud kriitiline haavatavus, mis v\u00f5imaldab m\u00f6\u00f6duda SAML-i (Security Assertion Markup Language) p\u00f5hist autentimist. Probleem on p\u00f5hjustatud haavatavusest (CVE-2024-45409) Ruby teekides ruby-saml ja omniauth-saml, mis teostavad SAML-i autentimise kliendi osa. Haavatusele on m\u00e4\u00e4ratud maksimaalne ohuaste 10 skaalal 10. Probleem on lahendatud ruby-saml (1.17.0 ja 1.12.3) ja omniauth-saml (2.2.0) pakettide uuendustes. <\/p>\n
The vulnerability is caused by improper handling of the XPath selector, leading to incorrect signature verification in XML format when parsing the response from the SAML server. An unauthenticated attacker with access to any signed SAML document can forge any SAML response for arbitrary content using a typical XSW (XML Signature Wrapping) attack. <\/p>\n
The essence of the attack is to take a correctly signed message and add an additional fake message to the related XML document, using the same identifier as the first message (this identifier will be verified when parsing the first message and, due to the error, will be perceived as verified for the second message). In the context of services using SAML for authentication, the vulnerability allows logging into the system as any user. \n Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"