PT-2024-40229 · Unknown · Php-Saml Toolkit

Published 2024-05-17 · Updated 2024-05-17

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: php-saml toolkit (affected versions not specified)

Description: The issue arises from the implicit conversion of numerical values to boolean in PHP, which can lead to an error state being treated as a successful signature verification. Specifically, the openssl verify() function returns -1 in case of an error, but this is converted to true when implicitly converted to a boolean. The LogoutRequest/LogoutResponse signature validator is affected, treating an error during signature verification as a successful verification. The impact is lower since the signature validation of SAMLResponses is not affected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-9WRW-P9RM-R782

Affected Products

Php-Saml Toolkit

References · 4

• https://osv.dev/vulnerability/GHSA-9wrw-p9rm-r782 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/onelogin/php-saml/2017-02-28.yaml · Note
• https://github.com/SAML-Toolkits/php-saml · Note
• https://github.com/onelogin/php-saml/commit/949359f5cad5e1d085c4e5447d9aa8f49a6e82a1 · Note