SAML Replay - P5 (#433)

* SAML Replay - P5

Adding:
P5 - Broken Authentication and Session Management - SAML Replay

* Additional Files

---------

Co-authored-by: Abhinav Nain <[email protected]>

Author: TimmyBugcrowd

mappings/cvss_v3/cvss_v3.json

@@ -302,6 +302,10 @@
             }
           ]
         },
+        {
+          "id": "saml_replay",
+          "cvss_v3": "AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H"
+        },
         {
           "id": "session_fixation",
           "children": [

mappings/remediation_advice/remediation_advice.json

@@ -469,6 +469,13 @@
             }
           ]
         },
+        {
+          "id": "saml_replay",
+          "references": [
+            "https://snyk.io/blog/common-saml-vulnerabilities-remediate/",
+            "https://support.okta.com/help/s/article/okta-service-has-protection-against-replay-attacks?language=en_US"
+          ]
+        },
         {
           "id": "session_fixation",
           "remediation_advice": "Always regenerate the session token after the users properly authenticate.",

third-party-mappings/remediation_training/secure-code-warrior-links.json

@@ -83,6 +83,7 @@
   "broken_authentication_and_session_management.failure_to_invalidate_session.on_password_change": "https://integration-api.securecodewarrior.com/api/v1/trial?id=bugcrowd&mappingList=vrt&mappingKey=broken_authentication_and_session_management:failure_to_invalidate_session:on_password_change&redirect=true",
   "broken_authentication_and_session_management.failure_to_invalidate_session.on_two_fa_activation_change": null,
   "broken_authentication_and_session_management.failure_to_invalidate_session.permission_change": null,
+  "broken_authentication_and_session_management.saml_replay": null,
   "broken_authentication_and_session_management.session_fixation": null,
   "broken_authentication_and_session_management.session_fixation.local_attack_vector": "https://integration-api.securecodewarrior.com/api/v1/trial?id=bugcrowd&mappingList=vrt&mappingKey=broken_authentication_and_session_management:session_fixation:local_attack_vector&redirect=true",
   "broken_authentication_and_session_management.session_fixation.remote_attack_vector": "https://integration-api.securecodewarrior.com/api/v1/trial?id=bugcrowd&mappingList=vrt&mappingKey=broken_authentication_and_session_management:session_fixation:remote_attack_vector&redirect=true",

vulnerability-rating-taxonomy.json

@@ -526,6 +526,12 @@
             }
           ]
         },
+        {
+          "id": "saml_replay",
+          "name": "SAML Replay",
+          "type": "subcategory",
+          "priority": 5
+        },
         {
           "id": "session_fixation",
           "name": "Session Fixation",