OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal

CRITIQUE 9.8CVE-2017-11430 · GHSA-94hm-8q65-rmxm · Published 17/04/2019 · updated 17/06/2026

En bref

CVE-2017-11430 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant omniauth-saml, omniauth saml (omniauth).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.4%, plus élevée que 84.3% des vulnérabilités.
Correctif : mettre à jour vers 1.10.0 ou plus récent.

Package	Affected versions	Patched versions
omniauth-saml RubyGems	`< 1.10.0`	`1.10.0`
omniauth saml omniauth	`≤ 1.9.0`	No fix yet

Description

OmniAuth OmniAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

NVD description

OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

References

nvd.nist.gov/vuln/detail/CVE-2017-11430 · ADVISORY
duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations · WEB
omniauth/omniauth-saml · PACKAGE
rubysec/ruby-advisory-db · WEB
kb.cert.org/vuls/id/475445 · WEB

Autres vulnérabilités de omniauth-saml

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

omniauth-saml

RubyGems

< 1.10.0

1.10.0

omniauth saml

omniauth

≤ 1.9.0

No fix yet

Description

NVD description