CVE-2018-6519: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp...

PT-2018-6686

Name of the Vulnerable Software and Affected Versions: SimpleSAMLphp versions prior to 1.14.16 Description: The issue allows an attacker to perform a Cross-Site Scripting attack by crafting links that execute arbitrary JavaScript code on the victim's web browser. This is due to a vulnerability in...

PT-2018-6687

Name of the Vulnerable Software and Affected Versions: SimpleSAMLphp versions prior to 1.14.17 Description: A signature-validation bypass issue was discovered in SimpleSAMLphp. This issue allows an attacker to impersonate any user of any IdP given an assertion signed by the targeted IdP, by sendi...

PT-2018-17607

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp SAML2 library versions prior to 1.10.4 SimpleSAMLphp SAML2 library versions 2.x prior to 2.3.5 SimpleSAMLphp SAML2 library versions 3.x prior to 3.1.1 Description The issue is related to a Regular Expression Denial of Service...

CVE-2018-6520: URL Redirection to Untrusted Site

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL...

PT-2018-17608

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.15.2 Description The issue allows remote attackers to bypass an open redirect protection mechanism. This can be achieved by using crafted authority data in a URL. Recommendations For versions prior to 1.15.2,...

PT-2018-17609

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.15.2 Description The issue is related to the sqlauth module in SimpleSAMLphp, which relies on the MySQL utf8 charset. This charset truncates queries when it encounters four-byte characters, potentially allowin...

Open redirection protection bypass

More info at https://simplesamlphp.org/security/201801-02...

Use of insecure connection charset (sqlauth module)

More info at https://simplesamlphp.org/security/201801-03...

Debian DLA-1205-1 : simplesamlphp security update

The simplesamlphp package in wheezy is vulnerable to multiple attacks on authentication-related code, leading to unauthorized access and information disclosure. CVE-2017-12867 The SimpleSAMLAuthTimeLimitedToken class allows attackers with access to a secret token to extend its validity period by...

[SECURITY] [DLA 1205-1] simplesamlphp security update

Package : simplesamlphp Version : 1.9.2-1+deb7u1 CVE ID : CVE-2017-12867 CVE-2017-12868 CVE-2017-12869 CVE-2017-12872 CVE-2017-12873 CVE-2017-12874 The simplesamlphp package in wheezy is vulnerable to multiple attacks on authentication-related code, leading to unauthorized access and information...

DLA-1205-1 simplesamlphp - security update

Bulletin has no description...

Signature validation bypass (SAML 1.1)

More info at https://simplesamlphp.org/security/201710-01...

Cross-site Scripting (XSS)

simplesamlphp is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute a malicious Javascript document through the url when the url is being redirected...

XML External Entity Processing (XXE)

simplesamlphp/saml2 is vulnerable to XML external entity processing XXE attacks. The attacks are possible because it does not use SAML2DOMDocumentFactory to create DOMDocuments from a string containing XML and does not call libxmldisableentityloader before calling any code...

SimpleSAMLphp multiauth module authentication bypass vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement SAML 2.0 Service Provider and Identity Provider functionality . multiauth module is one of the installed authentication module . A security vulnerability exists in the multiauth module in SimpleSAMLphp 1.14.13 and earlier...

SimpleSAMLphp PHP Session Fixation Vulnerability

SimpleSAMLphp is a suite of PHP authentication applications that implement the SAML 2.0 Service Provider and Identity Provider functionality.PHP is an open source general-purpose computer scripting language used in... A security vulnerability exists in the secureCompare method in SimpleSAMLphp...

SimpleSAMLphp CBC Mode Encryption Unauthentication Vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider features . A security vulnerability exists in SimpleSAMLphp 1.14.12 and earlier versions. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack a...

SimpleSAMLphp Incorrect Authentication Vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider functionality . A security vulnerability exists in SimpleSAMLphp versions 1.7.0 through 1.14.10. An attacker can exploit the vulnerability to obtain sensitive information a...

SimpleSAMLphp authcrypt module timed side channel attack vulnerability

SimpleSAMLphp is a PHP authentication application that implements the SAML2.0 service provider and identity provider functionality . A timing side channel attack vulnerability exists in the authcrypt module in SimpleSAMLphp 1.14.11 and earlier versions, which can be exploited by an attacker who...