← Retour aux CVEs

CVE-2017-12873

N/A

Description

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.

Details CVE

Score CVSS v3.1N/A

Publie9/1/2017

Derniere modification4/20/2025

Sourcenvd

Observations honeypot0

Produits affectes

debian:debian_linuxsimplesamlphp:simplesamlphp

Faiblesses (CWE)

CWE-384

References

https://github.com/simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953(cve@mitre.org)

https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html(cve@mitre.org)

https://simplesamlphp.org/security/201612-04(cve@mitre.org)

https://www.debian.org/security/2018/dsa-4127(cve@mitre.org)

https://github.com/simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html(af854a3a-2127-422b-91ae-364da2661108)

https://simplesamlphp.org/security/201612-04(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2018/dsa-4127(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.