VYPR
← All advisories
High severity8.8NVD Advisory· Published Jan 11, 2022· Updated Jun 17, 2026

CVE-2021-43999

CVE-2021-43999

Description

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Apache/Guacamole Server4 versions
    cpe:2.3:a:apache:guacamole:1.2.0:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:apache:guacamole:1.2.0:-:*:*:*:*:*:*
    • cpe:2.3:a:apache:guacamole:1.3.0:-:*:*:*:*:*:*
    • (no CPE)range: 1.2.0, 1.3.0
    • (no CPE)range: 1.3.0
  • osv-coords2 versions
    pkg:bitnami/guacamolepkg:bitnami/guacamole-server
    >= 1.2.0, <= 1.2.0+ 1 more
    • (no CPE)range: >= 1.2.0, <= 1.2.0
    • (no CPE)range: >= 1.2.0, <= 1.2.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.