A critical authentication bypass vulnerability in miniOrange SAML extensions for Joomla allows unauthenticated attackers to gain full administrative access.

The vulnerability stems from a flawed signature validation process where the openssl_verify function returns an error code (-1) that is incorrectly evaluated as a successful authentication. This allows unauthenticated attackers to bypass signature verification entirely by supplying a crafted SAMLResponse, enabling unauthorized account access.

This vulnerability carries a CVSS score of 10.0, representing the highest level of risk. An attacker can achieve complete site compromise by impersonating any user, including administrators, leading to total data exfiltration, site defacement, or the installation of malicious backdoors.

Immediate Action: Update all affected miniOrange SAML extensions to the latest patched versions provided by the vendor immediately.

Proactive Monitoring: Audit Joomla user account logs for suspicious authentication activity or unexpected administrative logins occurring via the SAML SSO flow.

Compensating Controls: Disable the affected SAML SSO functionality temporarily if an immediate update cannot be performed, reverting to standard Joomla authentication methods until the patch is applied.

Public Exploit Available: No

Given the critical nature of this authentication bypass, immediate remediation is mandatory. Organizations using these extensions must verify their versions and apply updates to prevent total account takeover and site compromise.