In breve
- CVE-2017-12872 è una vulnerabilità MEDIO (CVSS 5.9) che riguarda simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 73.6% delle vulnerabilità.
- Correzione: aggiornare a 1.15.0-rc1 o successiva.
Description
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
NVD description
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
Altre vulnerabilità di simplesamlphp/simplesamlphp
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free