Lucene search
Veracode Vulnerability DatabaseVERACODE:6145HistoryApr 19, 2018 - 3:04 a.m.
Incorrect Access Control
2018-04-1903:04:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
35.1%
lightsaml/lightsaml is vulnerable to incorrect access control. The vulnerability exists in the signature validation found in readers of src/LightSaml/Model/XmlDSig/ that could allow a malicious user to impersonate other users from the Identity Provider.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lightsaml/lightsaml | le | 1.3.3 |
Related
cve
cve
CVE-2018-1000165
2018-04-18 19:29:00
prion
prion
Improper access control
2018-04-18 19:29:00
cvelist
cvelist
CVE-2018-1000165
2018-04-18 19:00:00
osv
osv
CVE-2018-1000165
2018-04-18 19:29:00
LightSAML Incorrect Access Control vulnerability
2022-05-13 01:48:33
nvd
nvd
CVE-2018-1000165
2018-04-18 19:29:00
github
github
LightSAML Incorrect Access Control vulnerability
2022-05-13 01:48:33