CVE-2024-45409: A signed SAML document authenticates the wrong subject

The identity audit accepts a SAML principal that does not belong to the correctly signed assertion. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Learning platform / eu-central. Investigate saml-login, restore service, and verify the result.