En resumen
- CVE-2017-12868 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.1%, mayor que el 82.0% de las vulnerabilidades.
- Solución: actualizar a 1.14.14 o posterior.
Description
The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.
NVD description
The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.
Más vulnerabilidades de simplesamlphp/simplesamlphp
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free