CVE-2017-12873
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-12873
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12873.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-12873
- Aliases
- Related
- Published
- 2017-09-01T21:29:00Z
- Modified
- 2024-10-12T02:18:36.092156Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.
- References
-
- https://simplesamlphp.org/security/201612-04
- https://www.debian.org/security/2018/dsa-4127
- https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html
- https://github.com/simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953
- https://security-tracker.debian.org/tracker/CVE-2017-12873
Affected packages
Debian:11 / simplesamlphp
Package
- Name
- simplesamlphp
- Purl
- pkg:deb/debian/simplesamlphp?arch=source
Debian:12 / simplesamlphp
Package
- Name
- simplesamlphp
- Purl
- pkg:deb/debian/simplesamlphp?arch=source
Debian:13 / simplesamlphp
Package
- Name
- simplesamlphp
- Purl
- pkg:deb/debian/simplesamlphp?arch=source