A critical misconfiguration in IITB SSO version 1.1.0 permits unauthorized access to sensitive data, posing a significant risk to organizational information security.

This vulnerability involves a security misconfiguration within the SSO application that can be exploited by an unauthenticated attacker to gain unauthorized access to sensitive system data.

The exploitation of this vulnerability could lead to the unauthorized disclosure of sensitive information, potentially resulting in severe data breaches and regulatory non-compliance. Given the CVSS score of 8.8, this flaw is categorized as High severity, indicating that the potential for compromise of confidentiality, integrity, and availability is substantial.

Immediate Action: Contact the vendor immediately to obtain security configuration guidance or patches for version 1.1.0, as no public fix is currently confirmed.

Proactive Monitoring: Review authentication logs and application access patterns for unusual activity or unauthorized attempts to retrieve system data.

Compensating Controls: Implement strict network access controls and utilize a Web Application Firewall to filter suspicious traffic directed at the SSO login and data endpoints.

Public Exploit Available: No — there is no confirmed public exploit available in the provided data.

Organizations utilizing IITB SSO version 1.1.0 must treat this vulnerability with high priority due to the unauthenticated nature of the attack vector. While a definitive patch is not explicitly identified in the available data, administrators should engage with the vendor immediately to secure the SSO configuration and prevent unauthorized data access.