En resumen
- CVE-2017-12872 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 73.6% de las vulnerabilidades.
- Solución: actualizar a 1.15.0-rc1 o posterior.
Description
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
NVD description
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
Más vulnerabilidades de simplesamlphp/simplesamlphp
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free