Em resumo
- CVE-2017-12870 é uma vulnerabilidade MÉDIO (CVSS 5.9) que afeta simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Chance de exploração nos próximos 30 dias (EPSS): 0.88%, maior que 59.0% das vulnerabilidades.
- Correção: atualize para 1.14.13 ou posterior.
Description
SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers.
NVD description
SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers.
Mais vulnerabilidades de simplesamlphp/simplesamlphp
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free