Lucene search
MitreCVELIST:CVE-2017-16897HistoryDec 23, 2017 - 9:00 p.m.
CVE-2017-16897
2017-12-2321:00:00
mitre
www.cve.org
3
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response).
Related
prion
prion
Design/Logic Flaw
2017-12-27 17:08:00
osv
osv
High severity vulnerability that affects passport-wsfed-saml2
2017-12-28 22:51:45
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
2023-06-21 22:00:18
CVE-2017-16897
2017-12-27 17:08:17
veracode
veracode
Elevation Of Privileges
2017-12-27 22:45:11
github
github
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
2023-06-21 22:00:18
nvd
nvd
CVE-2017-16897
2017-12-27 17:08:17
cve
cve
CVE-2017-16897
2017-12-27 17:08:17