Lucene search
GoogleOSV:CVE-2017-16897HistoryDec 27, 2017 - 5:08 p.m.
CVE-2017-16897
2017-12-2717:08:17
Google
osv.dev
3
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response).
Related
prion
prion
Design/Logic Flaw
2017-12-27 17:08:00
osv
osv
High severity vulnerability that affects passport-wsfed-saml2
2017-12-28 22:51:45
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
2023-06-21 22:00:18
cve
cve
CVE-2017-16897
2017-12-27 17:08:17
veracode
veracode
Elevation Of Privileges
2017-12-27 22:45:11
cvelist
cvelist
CVE-2017-16897
2017-12-23 21:00:00
nvd
nvd
CVE-2017-16897
2017-12-27 17:08:17
github
github
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
2023-06-21 22:00:18