Prowler SAML Vulnerability: Cross-Tenant Account Takeover Risk

Severity

HIGH

Affected component

prowler-cloud (pypi)

Affected versions

< 5.37.0 or >= 0.0.0rc1, <= 0.0.0rc1 or >= 0.0.0rc10, <= 0.0.0rc10 or >= 0.0.0rc11, <= 0.0.0rc11 or >= 0.0.0rc2, <= 0.0.0rc2 or >= 0.0.0rc3, <= 0.0.0rc3 or >= 0.0.0rc4, <= 0.0.0rc4 or >= 0.0.0rc5, <= 0.0.0rc5 or >= 0.0.0rc6, <= 0.0.0rc6 or >= 0.0.0rc7, <= 0.0.0rc7 or >= 0.0.0rc8, <= 0.0.0rc8 or >= 0.0.0rc9, <= 0.0.0rc9 or >= 3.0.0, <= 3.0.0 or >= 3.0.0rc1, <= 3.0.0rc1 or >= 3.0.0rc11, <= 3.0.0rc11 or >= 3.0.0rc12, <= 3.0.0rc12 or >= 3.0.0rc13, <= 3.0.0rc13 or >= 3.0.0rc14, <= 3.0.0rc14 or >= 3.0.0rc15, <= 3.0.0rc15 or >= 3.0.1, <= 3.0.1 or >= 3.0.2, <= 3.0.2 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.10.0, <= 3.10.0 or >= 3.11.0, <= 3.11.0 or >= 3.11.1, <= 3.11.1 or >= 3.11.2, <= 3.11.2 or >= 3.11.3, <= 3.11.3 or >= 3.12.0, <= 3.12.0 or >= 3.12.1, <= 3.12.1 or >= 3.13.0, <= 3.13.0 or >= 3.13.1, <= 3.13.1 or >= 3.14.0, <= 3.14.0 or >= 3.15.0, <= 3.15.0 or >= 3.15.1, <= 3.15.1 or >= 3.15.2, <= 3.15.2 or >= 3.15.3, <= 3.15.3 or >= 3.16.0, <= 3.16.0 or >= 3.16.1, <= 3.16.1 or >= 3.16.10, <= 3.16.10 or >= 3.16.11, <= 3.16.11 or >= 3.16.12, <= 3.16.12 or >= 3.16.13, <= 3.16.13 or >= 3.16.14, <= 3.16.14 or >= 3.16.15, <= 3.16.15 or >= 3.16.17, <= 3.16.17 or >= 3.16.2, <= 3.16.2 or >= 3.16.3, <= 3.16.3 or >= 3.16.4, <= 3.16.4 or >= 3.16.5, <= 3.16.5 or >= 3.16.6, <= 3.16.6 or >= 3.16.7, <= 3.16.7 or >= 3.16.8, <= 3.16.8 or >= 3.16.9, <= 3.16.9 or >= 3.2.0, <= 3.2.0 or >= 3.2.1, <= 3.2.1 or >= 3.2.2, <= 3.2.2 or >= 3.2.3, <= 3.2.3 or >= 3.2.4, <= 3.2.4 or >= 3.3.0, <= 3.3.0 or >= 3.3.1, <= 3.3.1 or >= 3.3.2, <= 3.3.2 or >= 3.3.3, <= 3.3.3 or >= 3.3.4, <= 3.3.4 or >= 3.4.0, <= 3.4.0 or >= 3.4.1, <= 3.4.1 or >= 3.5.0, <= 3.5.0 or >= 3.5.1, <= 3.5.1 or >= 3.5.2, <= 3.5.2 or >= 3.5.3, <= 3.5.3 or >= 3.6.0, <= 3.6.0 or >= 3.6.1, <= 3.6.1 or >= 3.7.0, <= 3.7.0 or >= 3.7.1, <= 3.7.1 or >= 3.7.2, <= 3.7.2 or >= 3.8.0, <= 3.8.0 or >= 3.8.1, <= 3.8.1 or >= 3.8.2, <= 3.8.2 or >= 3.9.0, <= 3.9.0 or >= 4.0.0, <= 4.0.0 or >= 4.0.1, <= 4.0.1 or >= 4.1.0, <= 4.1.0 or >= 4.2.0, <= 4.2.0 or >= 4.2.1, <= 4.2.1 or >= 4.2.2, <= 4.2.2 or >= 4.2.3, <= 4.2.3 or >= 4.2.4, <= 4.2.4 or >= 4.3.0, <= 4.3.0 or >= 4.3.1, <= 4.3.1 or >= 4.3.2, <= 4.3.2 or >= 4.3.3, <= 4.3.3 or >= 4.3.4, <= 4.3.4 or >= 4.3.5, <= 4.3.5 or >= 4.3.6, <= 4.3.6 or >= 4.3.7, <= 4.3.7 or >= 4.4.0, <= 4.4.0 or >= 4.4.1, <= 4.4.1 or >= 4.5.0, <= 4.5.0 or >= 4.5.1, <= 4.5.1 or >= 4.5.2, <= 4.5.2 or >= 4.5.3, <= 4.5.3 or >= 4.6.0, <= 4.6.0 or >= 4.6.1, <= 4.6.1 or >= 4.6.2, <= 4.6.2 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.1.0, <= 5.1.0 or >= 5.1.1, <= 5.1.1 or >= 5.1.2, <= 5.1.2 or >= 5.1.3, <= 5.1.3 or >= 5.1.4, <= 5.1.4 or >= 5.1.5, <= 5.1.5 or >= 5.10.0, <= 5.10.0 or >= 5.10.1, <= 5.10.1 or >= 5.10.2, <= 5.10.2 or >= 5.11.0, <= 5.11.0 or >= 5.12.0, <= 5.12.0 or >= 5.12.1, <= 5.12.1 or >= 5.12.2, <= 5.12.2 or >= 5.12.3, <= 5.12.3 or >= 5.13.0, <= 5.13.0 or >= 5.13.1, <= 5.13.1 or >= 5.14.0, <= 5.14.0 or >= 5.14.1, <= 5.14.1 or >= 5.14.2, <= 5.14.2 or >= 5.15.0, <= 5.15.0 or >= 5.15.1, <= 5.15.1 or >= 5.16.0, <= 5.16.0 or >= 5.16.1, <= 5.16.1 or >= 5.17.0, <= 5.17.0 or >= 5.17.1, <= 5.17.1 or >= 5.18.0, <= 5.18.0 or >= 5.18.1, <= 5.18.1 or >= 5.18.2, <= 5.18.2 or >= 5.18.3, <= 5.18.3 or >= 5.19.0, <= 5.19.0 or >= 5.2.0, <= 5.2.0 or >= 5.2.1, <= 5.2.1 or >= 5.2.2, <= 5.2.2 or >= 5.2.3, <= 5.2.3 or >= 5.20.0, <= 5.20.0 or >= 5.21.0, <= 5.21.0 or >= 5.21.1, <= 5.21.1 or >= 5.22.0, <= 5.22.0 or >= 5.23.0, <= 5.23.0 or >= 5.24.0, <= 5.24.0 or >= 5.24.1, <= 5.24.1 or >= 5.24.2, <= 5.24.2 or >= 5.24.3, <= 5.24.3 or >= 5.24.4, <= 5.24.4 or >= 5.25.0, <= 5.25.0 or >= 5.25.1, <= 5.25.1 or >= 5.25.2, <= 5.25.2 or >= 5.25.3, <= 5.25.3 or >= 5.26.0, <= 5.26.0 or >= 5.26.1, <= 5.26.1 or >= 5.27.0, <= 5.27.0 or >= 5.27.1, <= 5.27.1 or >= 5.28.0, <= 5.28.0 or >= 5.28.1, <= 5.28.1 or >= 5.29.0, <= 5.29.0 or >= 5.29.1, <= 5.29.1 or >= 5.29.2, <= 5.29.2 or >= 5.3.0, <= 5.3.0 or >= 5.30.0, <= 5.30.0 or >= 5.30.1, <= 5.30.1 or >= 5.30.2, <= 5.30.2 or >= 5.30.3, <= 5.30.3 or >= 5.31.0, <= 5.31.0 or >= 5.31.1, <= 5.31.1 or >= 5.32.0, <= 5.32.0 or >= 5.32.1, <= 5.32.1 or >= 5.33.0, <= 5.33.0 or >= 5.33.1, <= 5.33.1 or >= 5.33.2, <= 5.33.2 or >= 5.34.0, <= 5.34.0 or >= 5.35.0, <= 5.35.0 or >= 5.36.0, <= 5.36.0 or >= 5.4.0, <= 5.4.0 or >= 5.4.1, <= 5.4.1 or >= 5.4.2, <= 5.4.2 or >= 5.4.3, <= 5.4.3 or >= 5.4.4, <= 5.4.4 or >= 5.5.1, <= 5.5.1 or >= 5.6.0, <= 5.6.0 or >= 5.7.0, <= 5.7.0 or >= 5.7.1, <= 5.7.1 or >= 5.7.2, <= 5.7.2 or >= 5.7.3, <= 5.7.3 or >= 5.7.4, <= 5.7.4 or >= 5.7.5, <= 5.7.5 or >= 5.8.0, <= 5.8.0 or >= 5.8.1, <= 5.8.1 or >= 5.9.0, <= 5.9.0 or >= 5.9.1, <= 5.9.1 or >= 5.9.2, <= 5.9.2 or < 5.30.3 or >= 0.0.0rc1, <= 0.0.0rc1 or >= 0.0.0rc10, <= 0.0.0rc10 or >= 0.0.0rc11, <= 0.0.0rc11 or >= 0.0.0rc2, <= 0.0.0rc2 or >= 0.0.0rc3, <= 0.0.0rc3 or >= 0.0.0rc4, <= 0.0.0rc4 or >= 0.0.0rc5, <= 0.0.0rc5 or >= 0.0.0rc6, <= 0.0.0rc6 or >= 0.0.0rc7, <= 0.0.0rc7 or >= 0.0.0rc8, <= 0.0.0rc8 or >= 0.0.0rc9, <= 0.0.0rc9 or >= 3.0.0, <= 3.0.0 or >= 3.0.0rc1, <= 3.0.0rc1 or >= 3.0.0rc11, <= 3.0.0rc11 or >= 3.0.0rc12, <= 3.0.0rc12 or >= 3.0.0rc13, <= 3.0.0rc13 or >= 3.0.0rc14, <= 3.0.0rc14 or >= 3.0.0rc15, <= 3.0.0rc15 or >= 3.0.1, <= 3.0.1 or >= 3.0.2, <= 3.0.2 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.10.0, <= 3.10.0 or >= 3.11.0, <= 3.11.0 or >= 3.11.1, <= 3.11.1 or >= 3.11.2, <= 3.11.2 or >= 3.11.3, <= 3.11.3 or >= 3.12.0, <= 3.12.0 or >= 3.12.1, <= 3.12.1 or >= 3.13.0, <= 3.13.0 or >= 3.13.1, <= 3.13.1 or >= 3.14.0, <= 3.14.0 or >= 3.15.0, <= 3.15.0 or >= 3.15.1, <= 3.15.1 or >= 3.15.2, <= 3.15.2 or >= 3.15.3, <= 3.15.3 or >= 3.16.0, <= 3.16.0 or >= 3.16.1, <= 3.16.1 or >= 3.16.10, <= 3.16.10 or >= 3.16.11, <= 3.16.11 or >= 3.16.12, <= 3.16.12 or >= 3.16.13, <= 3.16.13 or >= 3.16.14, <= 3.16.14 or >= 3.16.15, <= 3.16.15 or >= 3.16.17, <= 3.16.17 or >= 3.16.2, <= 3.16.2 or >= 3.16.3, <= 3.16.3 or >= 3.16.4, <= 3.16.4 or >= 3.16.5, <= 3.16.5 or >= 3.16.6, <= 3.16.6 or >= 3.16.7, <= 3.16.7 or >= 3.16.8, <= 3.16.8 or >= 3.16.9, <= 3.16.9 or >= 3.2.0, <= 3.2.0 or >= 3.2.1, <= 3.2.1 or >= 3.2.2, <= 3.2.2 or >= 3.2.3, <= 3.2.3 or >= 3.2.4, <= 3.2.4 or >= 3.3.0, <= 3.3.0 or >= 3.3.1, <= 3.3.1 or >= 3.3.2, <= 3.3.2 or >= 3.3.3, <= 3.3.3 or >= 3.3.4, <= 3.3.4 or >= 3.4.0, <= 3.4.0 or >= 3.4.1, <= 3.4.1 or >= 3.5.0, <= 3.5.0 or >= 3.5.1, <= 3.5.1 or >= 3.5.2, <= 3.5.2 or >= 3.5.3, <= 3.5.3 or >= 3.6.0, <= 3.6.0 or >= 3.6.1, <= 3.6.1 or >= 3.7.0, <= 3.7.0 or >= 3.7.1, <= 3.7.1 or >= 3.7.2, <= 3.7.2 or >= 3.8.0, <= 3.8.0 or >= 3.8.1, <= 3.8.1 or >= 3.8.2, <= 3.8.2 or >= 3.9.0, <= 3.9.0 or >= 4.0.0, <= 4.0.0 or >= 4.0.1, <= 4.0.1 or >= 4.1.0, <= 4.1.0 or >= 4.2.0, <= 4.2.0 or >= 4.2.1, <= 4.2.1 or >= 4.2.2, <= 4.2.2 or >= 4.2.3, <= 4.2.3 or >= 4.2.4, <= 4.2.4 or >= 4.3.0, <= 4.3.0 or >= 4.3.1, <= 4.3.1 or >= 4.3.2, <= 4.3.2 or >= 4.3.3, <= 4.3.3 or >= 4.3.4, <= 4.3.4 or >= 4.3.5, <= 4.3.5 or >= 4.3.6, <= 4.3.6 or >= 4.3.7, <= 4.3.7 or >= 4.4.0, <= 4.4.0 or >= 4.4.1, <= 4.4.1 or >= 4.5.0, <= 4.5.0 or >= 4.5.1, <= 4.5.1 or >= 4.5.2, <= 4.5.2 or >= 4.5.3, <= 4.5.3 or >= 4.6.0, <= 4.6.0 or >= 4.6.1, <= 4.6.1 or >= 4.6.2, <= 4.6.2 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.1.0, <= 5.1.0 or >= 5.1.1, <= 5.1.1 or >= 5.1.2, <= 5.1.2 or >= 5.1.3, <= 5.1.3 or >= 5.1.4, <= 5.1.4 or >= 5.1.5, <= 5.1.5 or >= 5.10.0, <= 5.10.0 or >= 5.10.1, <= 5.10.1 or >= 5.10.2, <= 5.10.2 or >= 5.11.0, <= 5.11.0 or >= 5.12.0, <= 5.12.0 or >= 5.12.1, <= 5.12.1 or >= 5.12.2, <= 5.12.2 or >= 5.12.3, <= 5.12.3 or >= 5.13.0, <= 5.13.0 or >= 5.13.1, <= 5.13.1 or >= 5.14.0, <= 5.14.0 or >= 5.14.1, <= 5.14.1 or >= 5.14.2, <= 5.14.2 or >= 5.15.0, <= 5.15.0 or >= 5.15.1, <= 5.15.1 or >= 5.16.0, <= 5.16.0 or >= 5.16.1, <= 5.16.1 or >= 5.17.0, <= 5.17.0 or >= 5.17.1, <= 5.17.1 or >= 5.18.0, <= 5.18.0 or >= 5.18.1, <= 5.18.1 or >= 5.18.2, <= 5.18.2 or >= 5.18.3, <= 5.18.3 or >= 5.19.0, <= 5.19.0 or >= 5.2.0, <= 5.2.0 or >= 5.2.1, <= 5.2.1 or >= 5.2.2, <= 5.2.2 or >= 5.2.3, <= 5.2.3 or >= 5.20.0, <= 5.20.0 or >= 5.21.0, <= 5.21.0 or >= 5.21.1, <= 5.21.1 or >= 5.22.0, <= 5.22.0 or >= 5.23.0, <= 5.23.0 or >= 5.24.0, <= 5.24.0 or >= 5.24.1, <= 5.24.1 or >= 5.24.2, <= 5.24.2 or >= 5.24.3, <= 5.24.3 or >= 5.24.4, <= 5.24.4 or >= 5.25.0, <= 5.25.0 or >= 5.25.1, <= 5.25.1 or >= 5.25.2, <= 5.25.2 or >= 5.25.3, <= 5.25.3 or >= 5.26.0, <= 5.26.0 or >= 5.26.1, <= 5.26.1 or >= 5.27.0, <= 5.27.0 or >= 5.27.1, <= 5.27.1 or >= 5.28.0, <= 5.28.0 or >= 5.28.1, <= 5.28.1 or >= 5.29.0, <= 5.29.0 or >= 5.29.1, <= 5.29.1 or >= 5.29.2, <= 5.29.2 or >= 5.3.0, <= 5.3.0 or >= 5.30.0, <= 5.30.0 or >= 5.30.1, <= 5.30.1 or >= 5.30.2, <= 5.30.2 or >= 5.4.0, <= 5.4.0 or >= 5.4.1, <= 5.4.1 or >= 5.4.2, <= 5.4.2 or >= 5.4.3, <= 5.4.3 or >= 5.4.4, <= 5.4.4 or >= 5.5.1, <= 5.5.1 or >= 5.6.0, <= 5.6.0 or >= 5.7.0, <= 5.7.0 or >= 5.7.1, <= 5.7.1 or >= 5.7.2, <= 5.7.2 or >= 5.7.3, <= 5.7.3 or >= 5.7.4, <= 5.7.4 or >= 5.7.5, <= 5.7.5 or >= 5.8.0, <= 5.8.0 or >= 5.8.1, <= 5.8.1 or >= 5.9.0, <= 5.9.0 or >= 5.9.1, <= 5.9.1 or >= 5.9.2, <= 5.9.2 or < 5.37.0 or >= 0.0.0rc1, <= 0.0.0rc1 or >= 0.0.0rc10, <= 0.0.0rc10 or >= 0.0.0rc11, <= 0.0.0rc11 or >= 0.0.0rc2, <= 0.0.0rc2 or >= 0.0.0rc3, <= 0.0.0rc3 or >= 0.0.0rc4, <= 0.0.0rc4 or >= 0.0.0rc5, <= 0.0.0rc5 or >= 0.0.0rc6, <= 0.0.0rc6 or >= 0.0.0rc7, <= 0.0.0rc7 or >= 0.0.0rc8, <= 0.0.0rc8 or >= 0.0.0rc9, <= 0.0.0rc9 or >= 3.0.0, <= 3.0.0 or >= 3.0.0rc1, <= 3.0.0rc1 or >= 3.0.0rc11, <= 3.0.0rc11 or >= 3.0.0rc12, <= 3.0.0rc12 or >= 3.0.0rc13, <= 3.0.0rc13 or >= 3.0.0rc14, <= 3.0.0rc14 or >= 3.0.0rc15, <= 3.0.0rc15 or >= 3.0.1, <= 3.0.1 or >= 3.0.2, <= 3.0.2 or >= 3.1.0, <= 3.1.0 or >= 3.1.1, <= 3.1.1 or >= 3.1.2, <= 3.1.2 or >= 3.1.3, <= 3.1.3 or >= 3.1.4, <= 3.1.4 or >= 3.10.0, <= 3.10.0 or >= 3.11.0, <= 3.11.0 or >= 3.11.1, <= 3.11.1 or >= 3.11.2, <= 3.11.2 or >= 3.11.3, <= 3.11.3 or >= 3.12.0, <= 3.12.0 or >= 3.12.1, <= 3.12.1 or >= 3.13.0, <= 3.13.0 or >= 3.13.1, <= 3.13.1 or >= 3.14.0, <= 3.14.0 or >= 3.15.0, <= 3.15.0 or >= 3.15.1, <= 3.15.1 or >= 3.15.2, <= 3.15.2 or >= 3.15.3, <= 3.15.3 or >= 3.16.0, <= 3.16.0 or >= 3.16.1, <= 3.16.1 or >= 3.16.10, <= 3.16.10 or >= 3.16.11, <= 3.16.11 or >= 3.16.12, <= 3.16.12 or >= 3.16.13, <= 3.16.13 or >= 3.16.14, <= 3.16.14 or >= 3.16.15, <= 3.16.15 or >= 3.16.17, <= 3.16.17 or >= 3.16.2, <= 3.16.2 or >= 3.16.3, <= 3.16.3 or >= 3.16.4, <= 3.16.4 or >= 3.16.5, <= 3.16.5 or >= 3.16.6, <= 3.16.6 or >= 3.16.7, <= 3.16.7 or >= 3.16.8, <= 3.16.8 or >= 3.16.9, <= 3.16.9 or >= 3.2.0, <= 3.2.0 or >= 3.2.1, <= 3.2.1 or >= 3.2.2, <= 3.2.2 or >= 3.2.3, <= 3.2.3 or >= 3.2.4, <= 3.2.4 or >= 3.3.0, <= 3.3.0 or >= 3.3.1, <= 3.3.1 or >= 3.3.2, <= 3.3.2 or >= 3.3.3, <= 3.3.3 or >= 3.3.4, <= 3.3.4 or >= 3.4.0, <= 3.4.0 or >= 3.4.1, <= 3.4.1 or >= 3.5.0, <= 3.5.0 or >= 3.5.1, <= 3.5.1 or >= 3.5.2, <= 3.5.2 or >= 3.5.3, <= 3.5.3 or >= 3.6.0, <= 3.6.0 or >= 3.6.1, <= 3.6.1 or >= 3.7.0, <= 3.7.0 or >= 3.7.1, <= 3.7.1 or >= 3.7.2, <= 3.7.2 or >= 3.8.0, <= 3.8.0 or >= 3.8.1, <= 3.8.1 or >= 3.8.2, <= 3.8.2 or >= 3.9.0, <= 3.9.0 or >= 4.0.0, <= 4.0.0 or >= 4.0.1, <= 4.0.1 or >= 4.1.0, <= 4.1.0 or >= 4.2.0, <= 4.2.0 or >= 4.2.1, <= 4.2.1 or >= 4.2.2, <= 4.2.2 or >= 4.2.3, <= 4.2.3 or >= 4.2.4, <= 4.2.4 or >= 4.3.0, <= 4.3.0 or >= 4.3.1, <= 4.3.1 or >= 4.3.2, <= 4.3.2 or >= 4.3.3, <= 4.3.3 or >= 4.3.4, <= 4.3.4 or >= 4.3.5, <= 4.3.5 or >= 4.3.6, <= 4.3.6 or >= 4.3.7, <= 4.3.7 or >= 4.4.0, <= 4.4.0 or >= 4.4.1, <= 4.4.1 or >= 4.5.0, <= 4.5.0 or >= 4.5.1, <= 4.5.1 or >= 4.5.2, <= 4.5.2 or >= 4.5.3, <= 4.5.3 or >= 4.6.0, <= 4.6.0 or >= 4.6.1, <= 4.6.1 or >= 4.6.2, <= 4.6.2 or >= 5.0.0, <= 5.0.0 or >= 5.0.1, <= 5.0.1 or >= 5.0.2, <= 5.0.2 or >= 5.0.3, <= 5.0.3 or >= 5.0.4, <= 5.0.4 or >= 5.0.5, <= 5.0.5 or >= 5.1.0, <= 5.1.0 or >= 5.1.1, <= 5.1.1 or >= 5.1.2, <= 5.1.2 or >= 5.1.3, <= 5.1.3 or >= 5.1.4, <= 5.1.4 or >= 5.1.5, <= 5.1.5 or >= 5.10.0, <= 5.10.0 or >= 5.10.1, <= 5.10.1 or >= 5.10.2, <= 5.10.2 or >= 5.11.0, <= 5.11.0 or >= 5.12.0, <= 5.12.0 or >= 5.12.1, <= 5.12.1 or >= 5.12.2, <= 5.12.2 or >= 5.12.3, <= 5.12.3 or >= 5.13.0, <= 5.13.0 or >= 5.13.1, <= 5.13.1 or >= 5.14.0, <= 5.14.0 or >= 5.14.1, <= 5.14.1 or >= 5.14.2, <= 5.14.2 or >= 5.15.0, <= 5.15.0 or >= 5.15.1, <= 5.15.1 or >= 5.16.0, <= 5.16.0 or >= 5.16.1, <= 5.16.1 or >= 5.17.0, <= 5.17.0 or >= 5.17.1, <= 5.17.1 or >= 5.18.0, <= 5.18.0 or >= 5.18.1, <= 5.18.1 or >= 5.18.2, <= 5.18.2 or >= 5.18.3, <= 5.18.3 or >= 5.19.0, <= 5.19.0 or >= 5.2.0, <= 5.2.0 or >= 5.2.1, <= 5.2.1 or >= 5.2.2, <= 5.2.2 or >= 5.2.3, <= 5.2.3 or >= 5.20.0, <= 5.20.0 or >= 5.21.0, <= 5.21.0 or >= 5.21.1, <= 5.21.1 or >= 5.22.0, <= 5.22.0 or >= 5.23.0, <= 5.23.0 or >= 5.24.0, <= 5.24.0 or >= 5.24.1, <= 5.24.1 or >= 5.24.2, <= 5.24.2 or >= 5.24.3, <= 5.24.3 or >= 5.24.4, <= 5.24.4 or >= 5.25.0, <= 5.25.0 or >= 5.25.1, <= 5.25.1 or >= 5.25.2, <= 5.25.2 or >= 5.25.3, <= 5.25.3 or >= 5.26.0, <= 5.26.0 or >= 5.26.1, <= 5.26.1 or >= 5.27.0, <= 5.27.0 or >= 5.27.1, <= 5.27.1 or >= 5.28.0, <= 5.28.0 or >= 5.28.1, <= 5.28.1 or >= 5.29.0, <= 5.29.0 or >= 5.29.1, <= 5.29.1 or >= 5.29.2, <= 5.29.2 or >= 5.3.0, <= 5.3.0 or >= 5.30.0, <= 5.30.0 or >= 5.30.1, <= 5.30.1 or >= 5.30.2, <= 5.30.2 or >= 5.30.3, <= 5.30.3 or >= 5.31.0, <= 5.31.0 or >= 5.31.1, <= 5.31.1 or >= 5.32.0, <= 5.32.0 or >= 5.32.1, <= 5.32.1 or >= 5.33.0, <= 5.33.0 or >= 5.33.1, <= 5.33.1 or >= 5.33.2, <= 5.33.2 or >= 5.34.0, <= 5.34.0 or >= 5.35.0, <= 5.35.0 or >= 5.36.0, <= 5.36.0 or >= 5.4.0, <= 5.4.0 or >= 5.4.1, <= 5.4.1 or >= 5.4.2, <= 5.4.2 or >= 5.4.3, <= 5.4.3 or >= 5.4.4, <= 5.4.4 or >= 5.5.1, <= 5.5.1 or >= 5.6.0, <= 5.6.0 or >= 5.7.0, <= 5.7.0 or >= 5.7.1, <= 5.7.1 or >= 5.7.2, <= 5.7.2 or >= 5.7.3, <= 5.7.3 or >= 5.7.4, <= 5.7.4 or >= 5.7.5, <= 5.7.5 or >= 5.8.0, <= 5.8.0 or >= 5.8.1, <= 5.8.1 or >= 5.9.0, <= 5.9.0 or >= 5.9.1, <= 5.9.1 or >= 5.9.2, <= 5.9.2

Patched version

Not yet available

Prowler's SAML authentication flow may allow cross-tenant account takeover due to trusting the email domain in SAML responses. Users of affected versions should review their configurations.

What happened

Prowler's SAML authentication mechanism reportedly trusted the email domain asserted in a SAMLResponse when determining which tenant should receive the final token. This design choice appears to enable a cross-tenant account takeover vulnerability. The issue was first flagged on September 11, 2026. The affected component is prowler-cloud (pypi) with versions less than 5.37.0 or versions between 0.0.0rc1 and 5.30.3 inclusive.

To assess your exposure, check if you are using an affected version of prowler-cloud. If so, review your SAML configuration to ensure token issuance is correctly bound to the intended tenant.

What to do about it

• Review and update your SAML configuration to ensure token issuance is bound to the correct tenant.
• Check your prowler-cloud version. If you are using a version less than 5.37.0 or between 0.0.0rc1 and 5.30.3 inclusive, consider upgrading to a non-affected version if available.
• Monitor the primary sources for updates on this vulnerability and any official fixes that may be released.

How 0Day would have caught this

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Sources

• [GHSA-h8m9-jgf8-vwvp] Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

Join the 0Day waitlist →

← Back to all threats