Em resumo
- CVE-2017-12872 é uma vulnerabilidade MÉDIO (CVSS 5.9) que afeta simplesamlphp/simplesamlphp, simplesamlphp (simplesamlphp).
- Chance de exploração nos próximos 30 dias (EPSS): 1.5%, maior que 73.6% das vulnerabilidades.
- Correção: atualize para 1.15.0-rc1 ou posterior.
Description
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
NVD description
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging use of the standard comparison operator to compare secret material against user input.
Mais vulnerabilidades de simplesamlphp/simplesamlphp
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free