PT-2018-18227 · Simplesamlphp · Simplesamlphp

Adam Goodman + 1 · Publicado 2018-03-05 · Atualizado 2022-05-14 · CVE-2018-7711

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SimpleSAMLphp versions prior to 1.15.4

Description: The issue arises from an incorrect check of return values in the signature validation utilities within the saml2 library of SimpleSAMLphp. This allows an attacker to force an error during validation, resulting in invalid signatures being accepted as valid. The problem stems from a dependency on PHP functionality that interprets a -1 error code as a true boolean value.

Recommendations: For versions prior to 1.15.4, update to version 1.15.4 or later to resolve the issue.

Exploit

Correção

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2018-7711

DLA-1314-1

GHSA-G888-G2PP-82HF

Produtos afetados

Simplesamlphp

Referências · 13

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/saml2/CVE-2018-7711.yaml · Exploit
• https://github.com/simplesamlphp/saml2/commit/4f6af7f69f29df8555a18b9bb7b646906b45924d · Correção
• https://simplesamlphp.org/security/201803-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-7711 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-7711 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7711 · Nota
• https://lists.debian.org/debian-lts-announce/2018/03/msg00017.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7711 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-7711 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-g888-g2pp-82hf · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-7711 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-7711 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-7711 · Aviso do Fabricante