Lucene search
PRIOn knowledge basePRION:CVE-2017-12867HistoryAug 29, 2017 - 3:29 p.m.
Design/Logic Flaw
2017-08-2915:29:00
PRIOn knowledge base
www.prio-n.com
3
The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplesamlphp | le | 1.14.14 |
Related
cve
cve
CVE-2017-12867
2017-08-29 15:29:00
ubuntucve
ubuntucve
CVE-2017-12867
2017-08-29 00:00:00
veracode
veracode
Unauthorized Extension Of Token Validity
2017-08-21 09:02:17
osv
osv
SimpleSAMLphp Invalid token creation and validation
2022-05-13 01:42:46
CVE-2017-12867
2017-08-29 15:29:00
simplesamlphp - security update
2017-12-12 00:00:00
github
github
SimpleSAMLphp Invalid token creation and validation
2022-05-13 01:42:46
nvd
nvd
CVE-2017-12867
2017-08-29 15:29:00
friendsofphp
friendsofphp
Invalid token creation and validation
2017-06-28 14:13:10
debiancve
debiancve
CVE-2017-12867
2017-08-29 15:29:00
cvelist
cvelist
CVE-2017-12867
2017-08-29 15:00:00
openvas
openvas
Debian: Security Advisory (DLA-1205-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-4127-1)
2018-03-01 00:00:00
nessus
nessus
Debian DLA-1205-1 : simplesamlphp security update
2017-12-13 00:00:00
Debian DSA-4127-1 : simplesamlphp - security update
2018-03-05 00:00:00
debian
debian
[SECURITY] [DLA 1205-1] simplesamlphp security update
2017-12-12 10:13:22
[SECURITY] [DSA 4127-1] simplesamlphp security update
2018-03-02 06:15:39
[SECURITY] [DSA 4127-1] simplesamlphp security update
2018-03-02 06:15:39