simplesamlphp vulnerabilities (Ubuntu)
26 vulnerabilities.
-
simplesamlphpUbuntu SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo` 7.1 High -
simplesamlphpUbuntu SimpleSAMLphp SAML2: Possible DoS via XPath Transform 7.5 High -
simplesamlphpUbuntu SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass 8.7 High -
simplesamlphpUbuntu SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding 8.6 High -
simplesamlphpUbuntu SimpleSAMLphp SAML2 has an XXE in parsing SAML messages 8.3 High -
simplesamlphpUbuntu SimpleSAMLphp xml-common XXE vulnerability 8.8 High -
simplesamlphpUbuntu Log injection in SimpleSAMLphp 4.4 Medium -
simplesamlphpUbuntu Signature validation bypass in XmlSecLibs 8.8 High -
simplesamlphpUbuntu SimpleSAMLphp saml2 incorrect signature validation 8.1 High -
simplesamlphpUbuntu SimpleSAMLphp Improper Verification of Cryptographic Signature 7.5 High -
simplesamlphpUbuntu SimpleSAMLphp Signature validation bypass 8.1 High -
simplesamlphpUbuntu SimpleSAMLphp XSS Vulnerability 6.1 Medium -
simplesamlphpUbuntu SimpleSAMLphp Use of insecure connection charset (sqlauth module) 9.8 Critical -
simplesamlphpUbuntu SimpleSAMLphp Open redirection protection bypass 6.1 Medium -
simplesamlphpUbuntu SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability 7.5 High -
simplesamlphpUbuntu SimpleSAMLphp InfoCard module Incorrect signature verification 7.5 High -
simplesamlphpUbuntu Incorrect persistent NameID generation in SimpleSAMLphp 9.8 Critical -
simplesamlphpUbuntu SimpleSAMLphp allows timing side-channel attacks 5.9 Medium -
simplesamlphpUbuntu SimpleSAMLphp Incorrect IV generation for encryption 5.9 Medium -
simplesamlphpUbuntu SimpleSAMLphp Unauthenticated encryption in CBC mode 5.9 Medium -
simplesamlphpUbuntu SimpleSAMLphp Authentication context bypass in the multiauth module 7.5 High -
simplesamlphpUbuntu SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module 9.8 Critical -
simplesamlphpUbuntu SimpleSAMLphp Invalid token creation and validation 5.9 Medium -
simplesamlphpUbuntu Incorrect signature verification in SimpleSAMLphp 6.3 Medium -
simplesamlphpUbuntu SimpleSAMLphp SAML2 spoof SAML responses 9.1 Critical -
simplesamlphpUbuntu SimpleSAMLphp Information leakage issue in the sanitycheck module 5.3 Medium