CVE-2017-12873
EUVD-2020-026501.09.2017, 21:29
SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| simplesamlphp | simplesamlphp | 1.7.0 ≤ 𝑥 ≤ 1.14.10 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| simplesamlphp |
|
Common Weakness Enumeration
References