Lucene search
PRIOn knowledge basePRION:CVE-2017-16897HistoryDec 27, 2017 - 5:08 p.m.
Design/Logic Flaw
2017-12-2717:08:00
PRIOn knowledge base
www.prio-n.com
3
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response).
| CPE | Name | Operator | Version |
|---|---|---|---|
| passport-wsfed-saml2 | lt | 3.0.5 |
Related
osv
osv
High severity vulnerability that affects passport-wsfed-saml2
2017-12-28 22:51:45
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
2023-06-21 22:00:18
CVE-2017-16897
2017-12-27 17:08:17
veracode
veracode
Elevation Of Privileges
2017-12-27 22:45:11
cvelist
cvelist
CVE-2017-16897
2017-12-23 21:00:00
nvd
nvd
CVE-2017-16897
2017-12-27 17:08:17
cve
cve
CVE-2017-16897
2017-12-27 17:08:17
github
github
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
2023-06-21 22:00:18