Lucene search
Veracode Vulnerability DatabaseVERACODE:5627HistoryJan 03, 2018 - 4:54 a.m.
XML Signature Wrapping
2018-01-0304:54:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
0.001 Low
EPSS
Percentile
42.9%
Samlify and express-saml2 are vulnerable to XML signature wrapping attacks. Attackers who observe SAML responses are able to add NameID’s to the response without breaking the signature check. This could allow them to login as any user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| express-saml2 | le | 1.4.1 | |
| samlify | le | 2.2.0 |
Related
prion
prion
Design/Logic Flaw
2018-01-02 17:29:00
nvd
nvd
CVE-2017-1000452
2018-01-02 17:29:00
cve
cve
CVE-2017-1000452
2022-10-03 16:23:10
osv
osv
CVE-2017-1000452
2018-01-02 17:29:00
cvelist
cvelist
CVE-2017-1000452
2022-10-03 16:23:10
github
github