Lucene search
Veracode Vulnerability DatabaseVERACODE:6365HistoryMay 23, 2018 - 8:16 a.m.
Signature Validation Bypass
2018-05-2308:16:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.003 Low
EPSS
Percentile
68.8%
simplesamlphp/saml2 is vulnerable to signature validation bypass attacks. The vulnerability exists in HTTPRedirect.php due to the reliance of a PHP functionality that interprets a -1 error code as true, allowing signature validation to be bypassed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplesamlphp/saml2 | le | 1.10.5 | |
| simplesamlphp/saml2 | le | 2.3.7 | |
| simplesamlphp/saml2 | le | 3.1.3 | |
| simplesamlphp/simplesamlphp | le | 1.15.3 |
Related
osv
osv
CVE-2018-7711
2018-03-05 22:29:00
simplesamlphp - security update
2018-03-23 00:00:00
SimpleSAMLphp saml2 incorrect signature validation
2022-05-14 03:34:12
redhatcve
redhatcve
CVE-2018-7711
2022-05-20 23:37:16
friendsofphp
friendsofphp
Incorrect signature validation
2018-03-02 14:30:00
prion
prion
Input validation
2018-03-05 22:29:00
debiancve
debiancve
CVE-2018-7711
2018-03-05 22:29:00
ubuntucve
ubuntucve
CVE-2018-7711
2018-03-05 00:00:00
cvelist
cvelist
CVE-2018-7711
2018-03-05 22:00:00
nvd
nvd
CVE-2018-7711
2018-03-05 22:29:00
cve
cve
CVE-2018-7711
2018-03-05 22:29:00
github
github
SimpleSAMLphp saml2 incorrect signature validation
2022-05-14 03:34:12
debian
debian
[SECURITY] [DLA 1314-1] simplesamlphp security update
2018-03-23 11:58:28
openvas
openvas
Debian: Security Advisory (DLA-1314-1)
2018-03-26 00:00:00
Fedora Update for php-simplesamlphp-saml2 FEDORA-2018-f4ab4d96f9
2018-03-26 00:00:00
Fedora Update for php-simplesamlphp-saml2 FEDORA-2018-6db40b0c37
2018-03-26 00:00:00
nessus
nessus
Debian DLA-1314-1 : simplesamlphp security update
2018-03-27 00:00:00
Fedora 26 : php-simplesamlphp-saml2_3 (2018-f2097d8937)
2018-03-27 00:00:00
Fedora 26 : php-simplesamlphp-saml2_1 (2018-d809bd2fd6)
2018-03-27 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: php-simplesamlphp-saml2_3-3.1.4-1.fc26
2018-03-25 21:24:23
[SECURITY] Fedora 27 Update: php-simplesamlphp-saml2_1-1.10.6-1.fc27
2018-03-25 21:49:18
[SECURITY] Fedora 26 Update: php-simplesamlphp-saml2-2.3.8-1.fc26
2018-03-25 21:24:22