Em resumo
- CVE-2017-12869 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Chance de exploração nos próximos 30 dias (EPSS): 2.4%, maior que 83.8% das vulnerabilidades.
- Correção: atualize para 1.14.14 ou posterior.
Description
The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.
NVD description
The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.
Mais vulnerabilidades de simplesamlphp/simplesamlphp
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free