CVE-2018-1000165

LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later...

CVE-2018-1000165: Incorrect Permission Assignment for Critical Resource

LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later...

PT-2018-9335

Name of the Vulnerable Software and Affected Versions LightSAML versions prior to 1.3.5 Description The issue is related to Incorrect Access Control in signature validation in readers, located in src/LightSaml/Model/XmlDSig/, which can lead to impersonation of any user from the Identity Provider...