Lucene search

CertccCVE-2018-5387

HistoryJul 24, 2018 - 3:29 p.m.

CVE-2018-5387

2018-07-2415:29:01

CWE-287

CWE-347

certcc

web.nvd.nist.gov

wizkunde

samlbase

vulnerability

cryptographic signature

manipulation

authentication bypass

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

56.8%

JSON

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

Affected configurations

Nvd

Node

wizkundesamlbaseRange<1.4.2

VendorProductVersionCPE
wizkundesamlbase*cpe:2.3:a:wizkunde:samlbase:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wizkunde	samlbase	*	cpe:2.3:a:wizkunde:samlbase::::::::

CNA Affected

[
  {
    "product": "SAMLBase",
    "vendor": "Wizkunde",
    "versions": [
      {
        "lessThan": "1.2.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations

github.com/GoGentoOSS/SAMLBase/commit/482cdf8c090e0f1179073034ebcb609ac7c3f5b3

github.com/GoGentoOSS/SAMLBase/issues/3

www.kb.cert.org/vuls/id/475445

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

56.8%

JSON

Related for CVE-2018-5387