CVE-2008-3891: Google Apps

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field.

Affected products

• Google Google Apps: any version

Published 2008-09-03. Last modified 2026-06-16.