Skip to content
Threat Feed
Subscribe

Product

Prowler (<= 5.30.0)

1 brief RSS
critical advisory

Prowler SAML Domain Claiming Enables Cross-Tenant Account Takeover

Prowler versions through 5.30.0 contain an improper authentication vulnerability where the SAML ACS finish flow incorrectly derives the target tenant from an asserted email domain, enabling cross-tenant account takeover.

Prowler authentication-bypass saml account-takeover cloud-security
2t