Description (CNA)
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and gain a session as the victim user. Only instances with the allow_idp_initiated SAML setting enabled are affected; this setting is off by default and Grafana OSS is not affected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Grafana / Grafana Enterprise | affected 11.6.0 through 11.6.17; affected 12.2.0 through 12.2.11; affected 12.3.0 through 12.3.11; affected 12.4.0 through 12.4.10; affected 13.0.0 through 13.0.7; affected 13.1.0 through 13.1.4; affected 13.2.0 through 13.2.0 |
CWE
CWE-294
References
ADP enrichment
No English description supplied.
No references supplied.