Debian/sogo: high 7.5
SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when
Action: Upgrade sogo to 5.1.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.1-1 | - |
Fixed versions
| 5.1.1-1 |
Sources
- osv: DEBIAN-CVE-2021-33054#Debian:13/sogo
- https://security-tracker.debian.org/tracker/CVE-2021-33054
published · modified · JSON