Lucene search
GoogleOSV:CVE-2018-7711HistoryMar 05, 2018 - 10:29 p.m.
CVE-2018-7711
2018-03-0522:29:00
Google
osv.dev
6
HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP functionality that interprets a -1 error code as a true boolean value.
Related
prion
prion
Input validation
2018-03-05 22:29:00
debiancve
debiancve
CVE-2018-7711
2018-03-05 22:29:00
veracode
veracode
Signature Validation Bypass
2018-05-23 08:16:40
osv
osv
simplesamlphp - security update
2018-03-23 00:00:00
SimpleSAMLphp saml2 incorrect signature validation
2022-05-14 03:34:12
redhatcve
redhatcve
CVE-2018-7711
2022-05-20 23:37:16
friendsofphp
friendsofphp
Incorrect signature validation
2018-03-02 14:30:00
ubuntucve
ubuntucve
CVE-2018-7711
2018-03-05 00:00:00
cvelist
cvelist
CVE-2018-7711
2018-03-05 22:00:00
nvd
nvd
CVE-2018-7711
2018-03-05 22:29:00
github
github
SimpleSAMLphp saml2 incorrect signature validation
2022-05-14 03:34:12
cve
cve
CVE-2018-7711
2018-03-05 22:29:00
debian
debian
[SECURITY] [DLA 1314-1] simplesamlphp security update
2018-03-23 11:58:28
openvas
openvas
Debian: Security Advisory (DLA-1314-1)
2018-03-26 00:00:00
Fedora Update for php-simplesamlphp-saml2 FEDORA-2018-f4ab4d96f9
2018-03-26 00:00:00
Fedora Update for php-simplesamlphp-saml2_1 FEDORA-2018-d809bd2fd6
2018-03-26 00:00:00
nessus
nessus
Debian DLA-1314-1 : simplesamlphp security update
2018-03-27 00:00:00
Fedora 26 : php-simplesamlphp-saml2_1 (2018-d809bd2fd6)
2018-03-27 00:00:00
Fedora 26 : php-simplesamlphp-saml2_3 (2018-f2097d8937)
2018-03-27 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: php-simplesamlphp-saml2_3-3.1.4-1.fc26
2018-03-25 21:24:23
[SECURITY] Fedora 27 Update: php-simplesamlphp-saml2_1-1.10.6-1.fc27
2018-03-25 21:49:18
[SECURITY] Fedora 27 Update: php-simplesamlphp-saml2_3-3.1.4-3.fc27
2018-03-25 21:49:21