Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:simplesamlphp:saml2:0.3.0:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2016-9814 |
The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean. Published: February 16, 2017; 9:59:14 PM -0500 |
V3.0: 9.1 CRITICAL V2.0: 8.5 HIGH |