CVE-2017-12869

CVE-2017-12869 affects SimpleSAMLphp multiauth module (1.14.13 and earlier) and allows remote attackers to bypass authentication context restrictions by using an authentication source defined in config/authsources.php due to improper input validation. Public advisories (e.g., Debian DSA-4127/DSA-...

CVE-2017-12868

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation...

CVE-2017-12869

The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input...

CVE-2017-12868

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation...

CVE-2017-12870

SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers...

CVE-2017-12871: Inadequate Encryption Strength

The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector IV...

CVE-2017-12869: Improper Input Validation

The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input...

PT-2017-12741

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.x through 1.14.11 Description The issue makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging the use of the first 16 bytes of the secret key as the initializati...

PT-2017-12738

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.13 and earlier Description The issue allows remote attackers to bypass authentication context restrictions. This is achieved by using an authentication source defined in config/authsources.php, via vectors related t...

PT-2017-12737

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.13 and earlier Description The issue concerns the secureCompare method in SimpleSAMLphp, which can be exploited to conduct session fixation attacks or possibly bypass authentication. This is due to missing character...

PT-2017-12740

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.12 and earlier Description The issue makes it easier for man-in-the-middle attackers to obtain sensitive information. This is achieved by leveraging the use of the aesEncrypt and aesDecrypt methods in the...

PT-2017-12742

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.11 and earlier Description The issue allows remote attackers to conduct timing side-channel attacks. This is possible due to the use of the standard comparison operator to compare secret material against user input ...

PT-2017-12744

Name of the Vulnerable Software and Affected Versions InfoCard module version 1.0 for SimpleSAMLphp Description The issue allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities. Recommendations For InfoCard module version 1.0,...

CVE-2017-12872: Exposure of Sensitive Information to an Unauthorized Actor

The 1 Htpasswd authentication source in the authcrypt module and 2 SimpleSAMLSession class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input...

CVE-2017-12870: Exposure of Sensitive Information to an Unauthorized Actor

SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers...

CVE-2017-12873: Session Fixation

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider IdP is misconfigured...

PT-2017-12743

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.7.0 through 1.14.10 Description The issue arises when a SimpleSAMLphp Identity Provider is misconfigured, leading to incorrect persistent NameID generation. This can cause different users to receive the same identifier...

CVE-2017-12868: Session Fixation

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation...

CVE-2017-12874: Improper Input Validation

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities...

SimpleSAMLphp Invalid Token Creation and Validation Vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider functionality . A security vulnerability exists in SimpleSAMLphp 1.14.14 and earlier versions of SimpleSAMLAuthTimeLimitedToken. An attacker can exploit the vulnerability t...