283 matches found
[SECURITY] [DSA 4630-1] python-pysaml2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4630-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 21, 2020 https://www.debian.org/security/faq -...
DSA-4630-1 python-pysaml2 - security update
Bulletin has no description...
CVE-2020-5390
A verification flaw was found in python-pysaml2, where it did not check that the signature in a SAML document was enveloped, which enabled XML signature wrapping XSW attacks. A remote attacker could exploit this flaw to convince SAML processing to verify the signature and accept malicious data...
Ubuntu 16.04 LTS / 18.04 LTS : PySAML2 vulnerability (USN-4245-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4245-1 advisory. It was discovered that PySAML2 incorrectly handled certain SAML files. An attacker could possibly use this issue to bypass signature verification with...
Ubuntu: Security Advisory (USN-4245-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4245-1 python-pysaml2 vulnerability
It was discovered that PySAML2 incorrectly handled certain SAML files. An attacker could possibly use this issue to bypass signature verification with arbitrary data...
USN-4245-1: PySAML2 vulnerability
It was discovered that PySAML2 incorrectly handled certain SAML files. An attacker could possibly use this issue to bypass signature verification with arbitrary data...
XML Signature Wrapping
pySAML2 is vulnerable to XML signature wrapping. The signature validation function checksignature does not properly validates the signature in a SAML document, allowing an attacker to bypass signature verification with arbitrary data...
CVE-2020-5390
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
CVE-2020-5390
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
DEBIAN-CVE-2020-5390
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
CVE-2020-5390
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
satosa (>=3.3.1, <=3.4.0) potentially affected by CVE-2020-5390 via pysaml2 (4.2.0)
pysaml2 PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - satosa =3.3.1, =3.4.0 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...
djangosaml2 (0.16.11), irisrelay (1.2.1) +1 more potentially affected by CVE-2020-5390 via pysaml2 (4.4.0)
pysaml2 PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - djangosaml2 0.16.11 - irisrelay 1.2.1 - satosa =3.4.2, =3.4.8 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...
Information disclosure
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
django-saml2-auth (>=1.0.2b1, <=1.1.4), django-saml2-auth-custom (>=1.0.0, <=1.0.4) potentially affected by CVE-2020-5390 via pysaml2 (4.0.5)
pysaml2 PYPI version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - django-saml2-auth =1.0.2b1, =1.0.0, =1.0.4 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...
django-saml2-auth-plus (1.0.0), djangosaml2 (0.17.1) +1 more potentially affected by CVE-2020-5390 via pysaml2 (4.5.0)
pysaml2 PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - django-saml2-auth-plus 1.0.0 - djangosaml2 0.17.1 - irisrelay =1.2.2, =1.3.1 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...
PYSEC-2020-94
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
PYSEC-2020-94
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping XSW. The signature information and the node/object that is signed can be in different places and thus the signature...
raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2020-5390 via pysaml2 (4.6.5)
pysaml2 PYPI version 4.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2020-5390 Source advisory: OSV:PYSEC-2020-94...