CVE-2008-3891

The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-09-03

Last modified

2024-09-16

Weaknesses

CWE-287

Affected products

• Google Apps (Google)

References

• http://www.kb.cert.org/vuls/id/612636
• http://www.kb.cert.org/vuls/id/MIMG-7FQGWU