Description (CNA)
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TP-Link Systems Inc. / Omada Software Controller (Windows) | affected 0 before 6.2.14.11 |
| TP-Link Systems Inc. / Omada Software Controller (Linux) | affected 0 before 6.2.14.11 |
| TP-Link Systems Inc. / OC2000 v1 | affected 0 before 1.41.11 Build 20260711 |
| TP-Link Systems Inc. / OC2000 v2 | affected 0 before 2.26.11 Build 20260711 |
| TP-Link Systems Inc. / OC200 v3 | affected 0 before 3.3.11 Build 20260711 |
| TP-Link Systems Inc. / OC220 v1 | affected 0 before 1.6.11 Build 20260711 |
| TP-Link Systems Inc. / OC220 v2 | affected 0 before 2.5.11 Build 20260711 |
| TP-Link Systems Inc. / OC300 v1 | affected 0 before 1.35.11 Build 20260711 |
| TP-Link Systems Inc. / OC400 v1 | affected 0 before 1.13.11 Build 20260711 |
CWE
CWE-611
References
- https://support.omadanetworks.com/en/download/software/omada-controller
- https://support.omadanetworks.com/us/download/software/omada-controller
- https://www.omadanetworks.com/en/support/download/
- https://www.omadanetworks.com/us/support/download/
- https://support.omadanetworks.com/en/document/133722/
ADP enrichment
No English description supplied.
No references supplied.