medium4.9
CVE-2023-23903
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format.
Impact
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nozominetworks | Cmc | before 22.6.2 |
| Nozominetworks | Guardian | before 22.6.2 |