CVE-2019-18632

CRÍTICO 9.8CVE-2019-18632 · Published 30/10/2019 · updated 17/06/2026

En resumen

CVE-2019-18632 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a eidas-node integration package (europa).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.77%, mayor que el 55.6% de las vulnerabilidades.
Solución: actualizar a 2.3.1 o posterior.

Package	Affected versions	Patched versions
eidas-node integration package europa	`< 2.3.1`	`2.3.1`

Description

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML response with a forged certificate.

References

sec-consult.com/en/blog/advisories/15587 · Exploit

Más vulnerabilidades de eidas-node integration package

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free