The vulnerability allows an attacker to update the SAML configuration without proper authorization. This can lead to severe consequences such as manipulation of authentication processes, fraudulent login requests, and theft of user information. The lack of appropriate access controls on the SAML configuration endpoint is the root cause of this issue.

An attacker can exploit this vulnerability by sending a crafted POST request to the SAML configuration endpoint. By doing so, they can update the SAML configuration with malicious data. This allows the attacker to manipulate authentication processes, potentially logging in as unauthorized users and accessing sensitive information.

Users of the software version 1.3.2 who have not yet updated to version 1.3.4 are affected by this vulnerability. This includes organizations using the software for authentication purposes.