PT-2017-7771 · Pysaml2+1 · Pysaml2+1

Fruechel · Published 2017-01-12 · Updated 2018-07-16 · CVE-2016-10149

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PySAML2 versions 4.4.0 and earlier

Description The issue allows remote attackers to read arbitrary files via a crafted SAML XML request or response. This is due to an XML External Entity (XXE) vulnerability.

Recommendations For PySAML2 versions 4.4.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2016-10149

DSA-3759-1

GHSA-C2VX-49JM-H3F6

PYSEC-2017-25

RHSA-2017:0936

RHSA-2017:0937

RHSA-2017:0938

SUSE-SU-2017:0569-1

USN-3402-1

Affected Products

Pysaml2

Ubuntu

References · 30

• https://github.com/rohe/pysaml2/issues/366 · Patch
• https://github.com/rohe/pysaml2/pull/379 · Patch
• https://github.com/rohe/pysaml2/commit/6e09a25d9b4b7aa7a506853210a9a14100b8bc9b · Patch
• https://cve.org/CVERecord?id=CVE-2016-10149 · Security Note
• https://access.redhat.com/errata/RHSA-2017:0936 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:0938 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10149 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2017-25 · Vendor Advisory
• http://openwall.com/lists/oss-security/2017/01/19/5 · Patch
• https://access.redhat.com/errata/RHSA-2017:0937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10149 · Security Note
• https://osv.dev/vulnerability/GHSA-c2vx-49jm-h3f6 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0569-1 · Vendor Advisory
• http://debian.org/security/2017/dsa-3759 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10149 · Vendor Advisory