CVE-2017-12873 Incorrect persistent NameID generation in SimpleSAMLphp
CriticalCVSS 9.8
EPSS 1.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simplesamlphp/simplesamlphp(Packagist) | >= 1.7.0, < 1.14.11 | 1.14.11 |
| simplesamlphp/simplesamlphp(Packagist) | = v1.12.0 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.13.0 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.13.0-rc1 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.13.0-rc2 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.13.1 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.13.2 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.0 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.0-rc1 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.1 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.10 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.2 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.3 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.4 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.5 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.6 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.7 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.8 | No fix listed |
| simplesamlphp/simplesamlphp(Packagist) | = v1.14.9 | No fix listed |
| debian/simplesamlphp(Debian:12) | < 1.14.11-1 | 1.14.11-1 |
| debian/simplesamlphp(Debian:14) | < 1.14.11-1 | 1.14.11-1 |
| debian/simplesamlphp(Debian:14) | = 1.10.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.11.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.12.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.12.0~rc1-1 | No fix listed |
Show 37 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/simplesamlphp(Debian:14) | = 1.12.0~rc2-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.13.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.13.1-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.13.1-2 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.13.2-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.1-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.10-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.2-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.2-2 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.3-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.4-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.5-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.6-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.7-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.8-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.14.9-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.6.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.6.1-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.6.2-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.6.3-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.6.3-2 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.6.3-3 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.7.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.7.0-2 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.8.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.8.1-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.8.2-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.9.0-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.9.0~rc1-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.9.0~rc2-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.9.1-1 | No fix listed |
| debian/simplesamlphp(Debian:14) | = 1.9.2-1 | No fix listed |
| simplesamlphp/simplesamlphp | >= 1.7.0, <= 1.14.10 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- github.com vendor-advisory
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking patch third-party-advisory
- github.com exploit
- [debian-lts-announce] 20171212 [SECURITY] [DLA 1205-1] simplesamlphp security update mailing-list third-party-advisory
- simplesamlphp.org patch vendor-advisory
- DSA-4127 third-party-advisory vendor-advisory
- Debian Security Tracker CVE-2017-12873 vendor-advisory
- github.com