Lucene search
Veracode Vulnerability DatabaseVERACODE:4930HistoryAug 21, 2017 - 2:38 p.m.
Padding Oracle Attack
2017-08-2114:38:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
48.0%
simplesamlphp is vulnerable to padding oracle attacks. The library does not authenticate the ciphertext, allowing a malicious user listening in on the network to conduct a padding oracle attack to recover the identifier and try impersonating the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplesamlphp/simplesamlphp | le | 1.14.12 |
References
Related
osv
osv
CVE-2017-12870
2017-09-01 13:29:00
SimpleSAMLphp Unauthenticated encryption in CBC mode
2022-05-17 01:17:12
debiancve
debiancve
CVE-2017-12870
2017-09-01 13:29:00
cvelist
cvelist
CVE-2017-12870
2017-09-01 13:00:00
github
github
SimpleSAMLphp Unauthenticated encryption in CBC mode
2022-05-17 01:17:12
friendsofphp
friendsofphp
Unauthenticated encryption in CBC mode
2017-04-26 13:24:00
cve
cve
CVE-2017-12870
2017-09-01 13:29:00
ubuntucve
ubuntucve
CVE-2017-12870
2017-09-01 00:00:00
prion
prion
Code injection
2017-09-01 13:29:00
nvd
nvd
CVE-2017-12870
2017-09-01 13:29:00