Lucene search
PRIOn knowledge basePRION:CVE-2017-11430HistoryApr 17, 2019 - 2:29 p.m.
Authentication flaw
2019-04-1714:29:00
PRIOn knowledge base
www.prio-n.com
2
OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| omnitauth-saml | le | 1.9.0 |
Related
cve
cve
CVE-2017-11430
2019-04-17 14:29:00
nvd
nvd
CVE-2017-11430
2019-04-17 14:29:00
github
github
ubuntucve
ubuntucve
CVE-2017-11430
2019-04-17 00:00:00
osv
osv
OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal
2019-07-05 21:11:43
CVE-2017-11430
2019-04-17 14:29:00
veracode
veracode
Authorization Bypass
2018-03-01 05:55:33
debiancve
debiancve
CVE-2017-11430
2019-04-17 14:29:00
cvelist
cvelist
cert
cert