# Greenhouse: Greenhouse is not affected by the recently published Single Sign-On SAML vulnerability

> Greenhouse status incident “Greenhouse is not affected by the recently published Single Sign-On SAML vulnerability” on 2018-02-28: impact none (vendor’s label), 0 min, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/greenhouse/incidents/p1wdwxz56wtv
Last updated: 2018-02-28T19:11:00Z

- Impact (vendor’s label): none
- Status: resolved
- Started: 2018-02-28 19:11 UTC · Resolved: 2018-02-28 19:11 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://status.greenhouse.io/incidents/p1wdwxz56wtv](https://status.greenhouse.io/incidents/p1wdwxz56wtv)
- [Company: Greenhouse](https://rewindex.com/company/greenhouse.md)

## Timeline of updates

- **resolved** 2018-02-28 19:11 UTC: Greenhouse is aware of this vulnerability and has reviewed the impact against applications using SAML authentication. \*Summary\* Security researchers found a vulnerability in some SAML implementations that threat actors could use to bypass primary authentication, potentially elevating permissions or impersonating privileged accounts. As Greenhouse already performs certain validation checks to prevent our systems from being exploited, Greenhouse customers are not at risk. For added layer of security, we will be updating our SAML libraries as soon as possible. \*Further context\* Due to validation checks performed on the NameID returned in SAML responses, this vulnerability could not be used to impersonate users belonging to other organizations. Additionally, organizations that do not allow employees to control the email address passed in the NameID field of the SAML response would not be vulnerable to any authorization flaws within their own organization. \*Next steps for Greenhouse customers\* No action is required by Greenhouse customers. \*Next steps being taken by Greenhouse\* Greenhouse is working to upgrade our SAML libraries to a patched version as soon as possible to ensure we are covered across all possible exploit vectors. \*Timeline\* The SAML library upgrades are undergoing testing and we will notify customers once the patches have been released.

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._

## Cite this

Status incident (vendor impact label: none) posted by Greenhouse, started 2018-02-28 19:11 UTC, resolved after 0 min, 1 update(s).

- Canonical URL: https://rewindex.com/company/greenhouse/incidents/p1wdwxz56wtv
- Citation: Greenhouse, “Greenhouse is not affected by the recently published Single Sign-On SAML vulnerability” (2018-02-28 19:11 UTC). Archived by Rewindex: https://rewindex.com/company/greenhouse/incidents/p1wdwxz56wtv (CC BY 4.0).
- Markdown link: `[Greenhouse: Greenhouse is not affected by the recently published Single Sign-On SAML vulnerability (2018-02-28)](https://rewindex.com/company/greenhouse/incidents/p1wdwxz56wtv)`


---
Canonical: https://rewindex.com/company/greenhouse/incidents/p1wdwxz56wtv · Markdown: https://rewindex.com/company/greenhouse/incidents/p1wdwxz56wtv.md · JSON: https://rewindex.com/api/v1/companies/greenhouse/incidents/p1wdwxz56wtv · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T15:29:27.725Z