CyberRota Analysis
AI-GeneratedAn information disclosure vulnerability in the SAML Single Sign-On functionality of Omada Controller allows authenticated users with SAML configuration privileges to exploit insufficient validation of user-supplied SAML metadata. This could lead to unauthorized access to sensitive information, posing a risk to user data integrity and confidentiality. Organizations utilizing Omada Controller with SAML configurations should prioritize addressing this vulnerability to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.