Security Bypass Via Signature Spoofing

simplesamlphp is vulnerable to security bypass via signature spoofing attacks. The attacks are possible because the SimpleSAML_XML_Validator incorrectly checks the return values in the signature validation, thereby allowing an attacker to spoof an invalid signature as valid. This flaw can also lead to other attacks such as denial of service (DoS).