There’s a serious bug in the current implementation of SAML authentication which allows an unauthenticated attacker to log into any existing user account without a password.
iPROS24
Exercises in web development
Blog Archives
