Threats tagged 'ghsa-xxr5-h8gc-q63j'

A vulnerability in Red Hat Advanced Cluster Security for Kubernetes (RHACS) allows replay attacks on the Central SAML authentication ACS endpoint. The flaw arises because the endpoint does not retain used SAML assertion or response identifiers, enabling an attacker with a valid, unexpired signed SAML response to reuse it multiple times and obtain distinct authentication tokens for the same identity. This could lead to unauthorized access under the mapped identity.