Lucene search
GoogleOSV:CVE-2017-11428HistoryApr 17, 2019 - 2:29 p.m.
CVE-2017-11428
2019-04-1714:29:00
Google
osv.dev
1
OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
Related
osv
osv
Ruby-SAML Improper Authentication vulnerability
2019-07-05 21:11:35
veracode
veracode
Authentication Bypass
2018-02-28 05:55:13
prion
prion
Authentication flaw
2019-04-17 14:29:00
cvelist
cvelist
nvd
nvd
CVE-2017-11428
2019-04-17 14:29:00
ubuntucve
ubuntucve
CVE-2017-11428
2019-04-17 00:00:00
github
github
Ruby-SAML Improper Authentication vulnerability
2019-07-05 21:11:35
cve
cve
CVE-2017-11428
2019-04-17 14:29:00
debiancve
debiancve
CVE-2017-11428
2019-04-17 14:29:00
cert
cert