CVE-2021-3196: hitachi id_bravura_security_fabric
Vulnerability summary
CVE-2021-3196 is a high (CVSS 8.8) vulnerability in hitachi id_bravura_security_fabric. EPSS estimates a 0.96% chance of exploitation in the next 30 days, higher than 61% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 09-06-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.96%
Chance of exploitation in the next 30 days
Percentile
61%
Versus all other CVEs
30-day change
0.00 pp
From 0.96% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (hitachi.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Hitachi1 product
- id_bravura_security_fabric≥ 11.0.0, ≤ 11.1.3 | ≥ 12.0.0, ≤ 12.0.2 | 12.1.0
1 vendor · 1 product
References
3 links- www.hitachi-id.com/cve-2021-3196-attackers-can-impersonate-another-userX Refsource CONFIRMVendor Advisory