CVE-2020-1677

CVE-2020-1677 describes a vulnerability in Juniper Networks Mist Cloud UI, affecting all versions prior to September 2, 2020, where improper handling of child elements in SAML responses allows an unauthenticated attacker to bypass SAML authentication. With a CVSS score of 7.2 (High), this vulnerability permits remote attackers to modify valid SAML responses without invalidating their cryptographic signature, potentially leading to unauthorized access and information disclosure. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.