PT-2017-12736 · Simplesamlphp · Simplesamlphp

Published 2017-08-29 · Updated 2022-05-13 · CVE-2017-12867

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 1.14.14 and earlier

Description The issue allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset in the SimpleSAML Auth TimeLimitedToken class.

Recommendations For versions 1.14.14 and earlier, consider restricting access to the SimpleSAML Auth TimeLimitedToken class until a patch is available. As a temporary workaround, limit the ability to manipulate the time offset to prevent attackers from extending the token's validity period.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2017-12867

DLA-1205-1

DSA-4127-1

GHSA-597C-MH7M-48V7

Affected Products

Simplesamlphp

References · 29

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12867.yaml · Exploit
• https://cve.org/CVERecord?id=CVE-2017-12867 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12867 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18121 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2017-12867 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12867 · Security Note
• https://osv.dev/vulnerability/DSA-4127-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7644 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6521 · Security Note
• https://simplesamlphp.org/security/201708-01 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12874 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12873 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12869 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-12867 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18122 · Security Note