Unverified50% confidenceFactExact time
This class of SAML flaws is usually categorized at the intersection of CWE-436 (Interpretation Conflict) and CWE-347 (Improper Verification of Cryptographic Signature).
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThere are four SAML authentication bypass vulnerabilities, whose common root cause is that the same SAML response is interpreted as different content by different parsers or expressions in the signature verification and identity extraction steps.69% similarVerifiedCVE-2021-44228 is the well-known Log4Shell vulnerability68% similarUnverifiedLog4Shell漏洞（CVE-2021-44228）被安全研究人员评为CVSS满分10.0，利用门槛极低，仅需在日志中注入一段JNDI查询字符串61% similarUnverifiedCVE-2026-53361 是位于 Linux 内核 AF_UNIX 套接字子系统中的漏洞，涉及垃圾回收机制与 MSG_PEEK 操作之间的竞争，可导致释放后使用（UAF）问题61% similarUnverifiedCWE是由MITRE维护的软件安全缺陷分类标准，涵盖SQL注入（CWE-89）、缓冲区溢出（CWE-121）等数百种漏洞类型61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1032382API
curl https://kongchang.com/api/v1/knowledge/claims/1032382MCP
get_claim(id=1032382)