Lucene search
GoogleOSV:GHSA-VG4F-8V9Q-5C3XHistoryMay 13, 2022 - 1:48 a.m.
LightSAML Incorrect Access Control vulnerability
2022-05-1301:48:33
Google
osv.dev
7
lightsaml
access control
signature validation
impersonation
identity provider
software
LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later.
Related
veracode
veracode
Incorrect Access Control
2018-04-19 03:04:54
cvelist
cvelist
CVE-2018-1000165
2018-04-18 19:00:00
prion
prion
Improper access control
2018-04-18 19:29:00
cve
cve
CVE-2018-1000165
2018-04-18 19:29:00
osv
osv
CVE-2018-1000165
2018-04-18 19:29:00
github
github
LightSAML Incorrect Access Control vulnerability
2022-05-13 01:48:33
nvd
nvd
CVE-2018-1000165
2018-04-18 19:29:00