PT-2017-12736

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.14 and earlier Description The issue allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset in the SimpleSAML Auth TimeLimitedToken class...