PT-2017-12736 · Simplesamlphp · Simplesamlphp

Publicado 2017-08-29 · Atualizado 2022-05-13 · CVE-2017-12867

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.14 and earlier

Description The issue allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset in the SimpleSAML Auth TimeLimitedToken class.

Recommendations For versions 1.14.14 and earlier, consider restricting access to the SimpleSAML Auth TimeLimitedToken class until a patch is available. As a temporary workaround, limit the ability to manipulate the time offset to prevent attackers from extending the token's validity period.

Exploit

Correção

Insufficient Session Expiration

Enumeração de Fraquezas

CWE-613

Identificadores relacionados

CVE-2017-12867

DLA-1205-1

DSA-4127-1

GHSA-597C-MH7M-48V7

Produtos afetados

Simplesamlphp

Referências · 29

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12867.yaml · Exploit
• https://github.com/simplesamlphp/simplesamlphp · Nota
• https://github.com/simplesamlphp/simplesamlphp/commit/608f24c2d5afd70c2af050785d2b12f878b33c68 · Nota
• https://cve.org/CVERecord?id=CVE-2017-12867 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-12867 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18121 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2017-12867 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12867 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-4127-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7644 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6521 · Nota de Segurança
• https://simplesamlphp.org/security/201708-01 · Aviso do Fabricante
• https://packages.debian.org/src:simplesamlphp · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12874 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12873 · Nota de Segurança