Tracecat accepts unsigned SAML logins in Docker Compose deployments
Open-source security tool turns off login checks, letting attackers take accounts!
Summary
Docker Compose deployments of Tracecat with SAML turn off signature checks, so an unauthenticated attacker can forge a response and take over existing user sessions. Versions from 0.37.0 before 1.0.0-beta.49 are affected, including superadmin accounts.
Affected when
- Docker Compose deployment
- SAML login enabled
What to do
Update to 1.0.0-beta.49.
Products and platforms
CVE IDs
Times
First published
First seen