Lucene search
Veracode Vulnerability DatabaseVERACODE:5862HistoryFeb 28, 2018 - 5:55 a.m.
Authentication Bypass
2018-02-2805:55:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.01
Percentile
83.6%
ruby-saml is vulnerable to authentication bypass. The application does not properly parse comments in certain XML nodes, causing text after a comment being lost before signing the SAML Message. This allows a malicious user to modify a SAML message without invalidating the cryptographic signature and bypass authentication for the SAML provider.
Related
rubygems
rubygems
Authentication bypass via incorrect XML canonicalization and DOM traversal
2018-02-26 21:00:00
osv
osv
Ruby-SAML Improper Authentication vulnerability
2019-07-05 21:11:35
CVE-2017-11428
2019-04-17 14:29:00
prion
prion
Authentication flaw
2019-04-17 14:29:00
cvelist
cvelist
nvd
nvd
CVE-2017-11428
2019-04-17 14:29:00
ubuntucve
ubuntucve
CVE-2017-11428
2019-04-17 00:00:00
debiancve
debiancve
CVE-2017-11428
2019-04-17 14:29:00
github
github
Ruby-SAML Improper Authentication vulnerability
2019-07-05 21:11:35
cve
cve
CVE-2017-11428
2019-04-17 14:29:00
cert
cert