Id Bravura Security Fabric
Approved changes feed: RSS · Atom
cpe:2.3:a:hitachi:id_bravura_security_fabric:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hitachi (437a37e3-5ce7-5362-9e23-5ea2c73e6d98) |
|---|---|
| Product | Id Bravura Security Fabric (e6ce1ff4-ae47-52fe-81b1-094d28c2cd0e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45523 |
vulnerable | 2026-06-08 06:48:06.738005 |
Details available
An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attempts through API SOAP.
Published: 2024-09-18T00:00:00.000Z
Updated: 2024-09-20T13:45:25.774Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3196 |
vulnerable | 2026-06-08 05:33:51.017456 |
Details available
HIGH (8.8)
An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user.
Published: 2021-06-09T14:10:56.000Z
Updated: 2024-08-03T16:45:51.390Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.