594 matches found
CVE-2016-3124
The CVE concerns SimpleSAMLphp’s sanitycheck module prior to version 1.14.1, which is vulnerable to information leakage. The issue allows remote attackers to determine the PHP version running on the affected system via unspecified vectors. The vulnerability is tied to the sanitycheck component, a...
CVE-2016-3124
The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors...
SimpleSAMLphp Security Bypass Vulnerability (CNVD-2016-13109)
SimpleSAMLphp is a PHP authentication application that implements the SAML 2.0 Service Provider and Identity Provider features. A security bypass vulnerability exists in SimpleSAMLphp. An attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...
Fedora 23 : php-simplesamlphp-saml2 / php-simplesamlphp-saml2_1 (2016-5c32bae671)
v1.10.3 / v2.3.3 - This is a security release fixing an issue with signature validation. Please upgrade as soon as possible. - 201612-01 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
Fedora Update for php-simplesamlphp-saml2 FEDORA-2016-5c32bae671
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-simplesamlphp-saml2 FEDORA-2016-8b1f72df21
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-simplesamlphp-saml2 FEDORA-2016-b000091725
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-simplesamlphp-saml2_1 FEDORA-2016-b000091725
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-simplesamlphp-saml2_1 FEDORA-2016-8b1f72df21
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-simplesamlphp-saml2_1 FEDORA-2016-5c32bae671
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 23 Update: php-simplesamlphp-saml2_1-1.10.3-1.fc23
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp 1, used by OpenConext 2. This library started as a collaboration between UNINETT 3 and SURFnet 4 but everyone is invited to contribute. Autoloader: /usr/share/php/SAML21/autoload.php 1 https://www.simplesamlphp.org/ 2...
[SECURITY] Fedora 23 Update: php-simplesamlphp-saml2-2.3.3-1.fc23
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp 1, used by OpenConext 2. This library started as a collaboration between UNINETT 3 and SURFnet 4 but everyone is invited to contribute. Autoloader: /usr/share/php/SAML2/autoload.php 1 https://www.simplesamlphp.org/ 2...
[SECURITY] Fedora 24 Update: php-simplesamlphp-saml2-2.3.3-1.fc24
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp 1, used by OpenConext 2. This library started as a collaboration between UNINETT 3 and SURFnet 4 but everyone is invited to contribute. Autoloader: /usr/share/php/SAML2/autoload.php 1 https://www.simplesamlphp.org/ 2...
[SECURITY] Fedora 24 Update: php-simplesamlphp-saml2_1-1.10.3-1.fc24
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp 1, used by OpenConext 2. This library started as a collaboration between UNINETT 3 and SURFnet 4 but everyone is invited to contribute. Autoloader: /usr/share/php/SAML21/autoload.php 1 https://www.simplesamlphp.org/ 2...
[SECURITY] Fedora 25 Update: php-simplesamlphp-saml2-2.3.3-1.fc25
A PHP library for SAML2 related functionality. Extracted from SimpleSAMLphp 1, used by OpenConext 2. This library started as a collaboration between UNINETT 3 and SURFnet 4 but everyone is invited to contribute. Autoloader: /usr/share/php/SAML2/autoload.php 1 https://www.simplesamlphp.org/ 2...
Fedora 25 : php-simplesamlphp-saml2 / php-simplesamlphp-saml2_1 (2016-8b1f72df21)
v1.10.3 / v2.3.3 - This is a security release fixing an issue with signature validation. Please upgrade as soon as possible. - 201612-01 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
Fedora 24 : php-simplesamlphp-saml2 / php-simplesamlphp-saml2_1 (2016-b000091725)
v1.10.3 / v2.3.3 - This is a security release fixing an issue with signature validation. Please upgrade as soon as possible. - 201612-01 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
Incorrect persistent NameID generation
More info at https://simplesamlphp.org/security/201612-04...
SimpleSAMLphp Security Bypass Vulnerability
SimpleSAMLphp is an application written in native PHP for handling validation.The SAML2Utils class provides a series of methods to validate XML digital signatures against given keywords. A security bypass vulnerability exists in SimpleSAMLphp. An attacker can bypass security constraints to perfor...
