CVE-2017-12867

The SimpleSAMLAuthTimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset...

CVE-2017-12867

CVE-2017-12867 affects SimpleSAMLphp 1.14.14 and earlier where an attacker with access to a secret token can extend the token’s validity by manipulating the prepended time offset. The connected advisories confirm this vulnerability in multiple Debian releases and note that patches were released (...

CVE-2017-12867

The SimpleSAMLAuthTimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset...