In breve
- CVE-2017-12870 è una vulnerabilità MEDIO (CVSS 5.9) che riguarda simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.88%, superiore al 59.0% delle vulnerabilità.
- Correzione: aggiornare a 1.14.13 o successiva.
Description
SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers.
NVD description
SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers.
Altre vulnerabilità di simplesamlphp/simplesamlphp
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free