A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mod_auth_mellon | Mod_auth_mellon_project | * | 0.14.2 (excluding) |
| Libapache2-mod-auth-mellon | Ubuntu | bionic | * |
| Libapache2-mod-auth-mellon | Ubuntu | cosmic | * |
| Libapache2-mod-auth-mellon | Ubuntu | devel | * |
| Libapache2-mod-auth-mellon | Ubuntu | disco | * |
| Libapache2-mod-auth-mellon | Ubuntu | eoan | * |
| Libapache2-mod-auth-mellon | Ubuntu | focal | * |
| Libapache2-mod-auth-mellon | Ubuntu | groovy | * |
| Libapache2-mod-auth-mellon | Ubuntu | trusty | * |
| Libapache2-mod-auth-mellon | Ubuntu | xenial | * |
| Red Hat Enterprise Linux 7 | RedHat | mod_auth_mellon-0:0.14.0-2.el7_6.4 | * |
| Red Hat Enterprise Linux 8 | RedHat | mod_auth_mellon-0:0.14.0-3.el8_0.2 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 6 | RedHat | httpd24-httpd-0:2.4.34-7.el6.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | httpd24-httpd-0:2.4.34-7.el7.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | httpd24-mod_auth_mellon-0:0.13.1-2.el7.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS | RedHat | httpd24-httpd-0:2.4.34-7.el7.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS | RedHat | httpd24-mod_auth_mellon-0:0.13.1-2.el7.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS | RedHat | httpd24-httpd-0:2.4.34-7.el7.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS | RedHat | httpd24-mod_auth_mellon-0:0.13.1-2.el7.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS | RedHat | httpd24-httpd-0:2.4.34-7.el7.1 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS | RedHat | httpd24-mod_auth_mellon-0:0.13.1-2.el7.1 | * |