CVE-2011-4625

2019-11-0614:53:31

redhat

www.cve.org

0.002 Low

EPSS

Percentile

59.0%

JSON

simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.

CNA Affected

[
  {
    "product": "simplesamlphp",
    "vendor": "simplesamlphp",
    "versions": [
      {
        "status": "affected",
        "version": "1.13.1-2"
      }
    ]
  }
]