Lucene search

K
osvGoogleOSV:CVE-2016-9955
HistoryFeb 17, 2017 - 2:59 a.m.

CVE-2016-9955

2017-02-1702:59:14
Google
osv.dev
2

7.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.

7.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%