CVE-2021-3196

8.8 HIGH

An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0

Published: 2021-06-09 · Last updated: 2026-06-17

Severity and scoring

CVSS: 8.8 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-347

Affected products

Vendor	Product
hitachi	id_bravura_security_fabric

Description

An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-3196
[Vendor advisory]https://www.hitachi-id.com/cve-2021-3196-attackers-can-impersonate-another-user
[Vendor advisory]https://www.hitachi.com/hirt/hitachi-sec/2021/601.html
[Vendor advisory]https://www.hitachi.com/hirt/security/index.html
[Vendor advisory]https://www.hitachi-id.com/cve-2021-3196-attackers-can-impersonate-another-user
[Vendor advisory]https://www.hitachi.com/hirt/hitachi-sec/2021/601.html
[Vendor advisory]https://www.hitachi.com/hirt/security/index.html

Related CVEs

Same vendor

CVE-2025-11159 — Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to extern... (9.1 CRITICAL)
CVE-2021-41573 — Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure (7.5 HIGH)

Same CWE

CVE-2026-42743 — Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions (6.5 MEDIUM)
CVE-2026-48558 — SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authenticati... (10.0 CRITICAL)
CVE-2026-50010 — Netty is a network application framework for development of protocol servers and clients (7.5 HIGH)
CVE-2026-50634 — A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticate... (6.5 MEDIUM)
CVE-2026-41005 — Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from th... (9.0 CRITICAL)