CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-45523
https://notcve.org/view.php?id=CVE-2024-45523
18 Sep 2024 — An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attempts through API SOAP. • https://www.bravurasecurity.com/cve-2024-45523-resource-leak-in-api-after-a-failed-login-attempt • CWE-307: Improper Restriction of Excessive Authentication Attempts •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 1CVE-2021-3196
https://notcve.org/view.php?id=CVE-2021-3196
09 Jun 2021 — An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the a... • https://www.hitachi-id.com/cve-2021-3196-attackers-can-impersonate-another-user • CWE-347: Improper Verification of Cryptographic Signature •