In breve
- CVE-2017-12868 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 82.0% delle vulnerabilità.
- Correzione: aggiornare a 1.14.14 o successiva.
Description
The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.
NVD description
The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.
Altre vulnerabilità di simplesamlphp/simplesamlphp
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free