GHSA-7GH2-8Q93-87HP Wizkunde SAMLBase SAML Bypass

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service...

Wizkunde SAMLBase SAML Bypass

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service...

SAML Authentication Bypass

Wizkunde SAMLBase is vulnerable to authentication bypasses. This is due to the inconsistent handling of comments within XML nodes, resulting in the incorrect parsing of the inner text of XML nodes. This causes any inner text after the comment to be lost prior to signing of the SAML message. An...

CVE-2018-5387

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service...

CVE-2018-5387

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service...

CVE-2018-5387

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service...

CVE-2018-5387

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service...

CVE-2018-5387

CVE-2018-5387 affects Wizkunde SAMLBase. Root cause: incorrect handling of XML DOM traversal/canonicalization APIs can cause SAML data to be manipulated without invalidating the cryptographic signature, enabling potential authentication bypass of SAML service providers. Affected Wizkunde SAMLBase...

CVE-2018-5387: Improper Authentication

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service...

PT-2018-16940

Name of the Vulnerable Software and Affected Versions Wizkunde SAMLBase affected versions not specified Description The issue arises from the incorrect utilization of XML DOM traversal and canonicalization APIs, which may allow an attacker to manipulate SAML data without invalidating its...