CVE:CVE-2020-27846
CNNVD:CNNVD-202012-1307
Crewjam Saml是Crewjam个人开发者的一个基于Go语言实现的可与Saml格式文件进行交互的代码库。
crewjam saml 存在安全漏洞，该漏洞源于DescriptionA signature verification，这个缺陷允许攻击者可利用该漏洞绕过SAML身份验证。来自此漏洞的最大威胁是机密性、完整性以及系统可用性。
solution:Upgrade grafana grafana to a higher version than 6.7.5,7.2.3,7.3.6,and avoid the version (,6.7.5),[7.0.0,7.2.3),[7.3.0,7.3.6); Upgrade saml_project saml to a higher version than 0.4.3,and avoid the version (,0.4.3); Upgrade redhat openshift_container_platform to a higher version than 3.11,4.0,and avoid the version 3.11,4.0; Upgrade redhat openshift_service_mesh to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33