Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Inverse Subscribe
Filtered by product Sogo
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33054 2 Debian, Inverse 2 Debian Linux, Sogo 2022-03-29 5.0 MEDIUM 7.5 HIGH
SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method. (Only versions after 2.0.5a are affected.)