CVE-2021-3196: High severity Hitachi ID Bravura Security Fabric vulnerability
An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3196?
CVE-2021-3196 is classified as a high-severity vulnerability due to the potential for impersonation of users.
How do I fix CVE-2021-3196?
To mitigate CVE-2021-3196, update Hitachi ID Bravura Security Fabric to version 12.1.0 or later.
Which versions of Hitachi ID Bravura Security Fabric are affected by CVE-2021-3196?
CVE-2021-3196 affects versions 11.0.0 to 11.1.3 and 12.0.0 to 12.0.2, including 12.1.0.
What type of attack does CVE-2021-3196 enable?
CVE-2021-3196 allows attackers to inject additional data into a signed SAML response, enabling user impersonation.
Is there a workaround for CVE-2021-3196 if I cannot immediately upgrade?
Currently, the best solution for CVE-2021-3196 is to upgrade to the latest version of Hitachi ID Bravura Security Fabric, as no specific workaround is provided.