{"id":"CVE-2026-123540","kind":"vulnerability","aliases":["CVE-2026-123540"],"related":[],"title":"OpenAM: incomplete output encoding lets SAML 1.x identity provider alter attributes","description":"OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter attribute values by injecting unencoded content into the service provider auto-submitted form. Attackers controlling a trusted identity provider can craft assertion attribute names or values that reach the target application in modified form, undermining the integrity of received attributes.","summary":"OpenAM before 16.1.4 does not fully encode output in the service provider auto-submitted form, so a SAML 1.x identity provider can inject content. An attacker who controls a trusted identity provider can change attribute names or values before they reach the application.","severity":"low","cvss":2.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["identity","openam","package","saml"],"not_affected_if":["no-saml-1x-idp","openam-16.1.4-or-later"],"how_to_check":"- Check the OpenAM version in use; it is affected if it is below `16.1.4`.\n- Check whether any service provider trusts SAML 1.x identity providers that an outside party could control.","fix":"- OpenAM: move to `16.1.4` or later (per the advisory data in the sources).","status":"open","published_at":"2026-11-08T02:16:44+00:00","first_seen_at":"2026-11-08T02:21:10+00:00","triaged_at":"2026-11-08T02:26:48+00:00","updated_at":"2026-11-08T02:26:48+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-08T02:26:48Z","model":"claude-haiku-5-5","output":{"fix":"- OpenAM: move to `16.1.4` or later (per the advisory data in the sources).","reach":"network","title":"OpenAM: incomplete output encoding lets SAML 1.x identity provider alter attributes","impact":"low","summary":"OpenAM before 16.1.4 does not fully encode output in the service provider auto-submitted form, so a SAML 1.x identity provider can inject content. An attacker who controls a trusted identity provider can change attribute names or values before they reach the application.","audience":"businesses","category":"package","nicknames":[],"who_cares":["openam","saml","identity"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"attribute values reaching the application are altered by a trusted provider","analyst_note":"","how_to_check":"- Check the OpenAM version in use; it is affected if it is below `16.1.4`.\n- Check whether any service provider trusts SAML 1.x identity providers that an outside party could control.","plain_action":"","needs_analyst":false,"not_affected_if":["openam-16.1.4-or-later","no-saml-1x-idp"],"who_is_affected":"Teams running OpenAM as a SAML service provider that accept SAML 1.x assertions. The risk depends on whether an untrusted or compromised identity provider can reach the auto-submitted form. Deployments on newer OpenAM releases, or that use no SAML 1.x identity provider, can skip it.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"low"},"cost_usd":0.000698,"input_tokens":4295,"output_tokens":537,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-123540':15A,18A '-2026':14A,17A '1':7A,42B,81C '16.1.4':25B,70C 'allow':78C 'alter':11A,86C 'applic':67B,118C 'assert':109C 'attack':50B,101C 'attribut':12A,59B,87C,110C,127C 'auto':36B,98C 'auto-submit':35B,97C 'chang':58B 'contain':71C 'content':48B,92C 'control':52B,102C 'craft':108C 'cve':13A,16A 'encod':4A,29B,75C 'form':38B,100C,121C 'fulli':28B 'ident':9A,19B,44B,55B,83C,105C 'incomplet':2A,73C 'inject':47B,90C 'integr':124C 'let':5A 'modifi':120C 'name':60B,111C 'openam':1A,20B,23B,68C 'output':3A,30B,74C 'packag':21B 'provid':10A,34B,45B,56B,84C,96C,106C 'reach':65B,115C 'receiv':126C 'saml':6A,22B,41B,80C 'servic':33B,95C 'submit':37B,99C 'target':117C 'trust':54B,104C 'undermin':122C 'unencod':91C 'valu':62B,88C,113C 'vulner':76C 'x':8A,43B,82C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenAM as a SAML service provider that accept SAML 1.x assertions. The risk depends on whether an untrusted or compromised identity provider can reach the auto-submitted form. Deployments on newer OpenAM releases, or that use no SAML 1.x identity provider, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["identity","low","openam","package","saml"],"campaign_type":null,"search_a":"'-123540':15A,18A '-2026':14A,17A '1':7A 'alter':11A 'attribut':12A 'cve':13A,16A 'encod':4A 'ident':9A 'incomplet':2A 'let':5A 'openam':1A 'output':3A 'provid':10A 'saml':6A 'x':8A","search_b":"'1':42B '16.1.4':25B 'applic':67B 'attack':50B 'attribut':59B 'auto':36B 'auto-submit':35B 'chang':58B 'content':48B 'control':52B 'encod':29B 'form':38B 'fulli':28B 'ident':19B,44B,55B 'inject':47B 'name':60B 'openam':20B,23B 'output':30B 'packag':21B 'provid':34B,45B,56B 'reach':65B 'saml':22B,41B 'servic':33B 'submit':37B 'trust':54B 'valu':62B 'x':43B","search_c":"'1':81C '16.1.4':70C 'allow':78C 'alter':86C 'applic':118C 'assert':109C 'attack':101C 'attribut':87C,110C,127C 'auto':98C 'auto-submit':97C 'contain':71C 'content':92C 'control':102C 'craft':108C 'encod':75C 'form':100C,121C 'ident':83C,105C 'incomplet':73C 'inject':90C 'integr':124C 'modifi':120C 'name':111C 'openam':68C 'output':74C 'provid':84C,96C,106C 'reach':115C 'receiv':126C 'saml':80C 'servic':95C 'submit':99C 'target':117C 'trust':104C 'undermin':122C 'unencod':91C 'valu':88C,113C 'vulner':76C 'x':82C","first_public_at":"2026-10-22T09:31:36+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123540","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123540","severity":null,"published_at":"2026-11-08T02:16:44+00:00","modified_at":"2026-11-08T02:16:44+00:00","first_seen_at":"2026-11-08T02:21:10+00:00","fetched_at":"2026-11-08T02:21:10+00:00","note":null}],"documents":[{"id":99229,"url":"https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-pw99-8h4m-p3gm","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-10-22T09:31:36+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":99230,"url":"https://www.vulncheck.com/advisories/openam-before-16.1.4-incomplete-attribute-encoding-in-saml-1-x-form-post","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}