CVE-2017-12867: SimpleSAMLphp Invalid token creation and validation
Summary
CVE-2017-12867: SimpleSAMLphp Invalid token creation and validation. Affects simplesamlphp/simplesamlphp versions >= 1.14.0, < 1.14.15. Fixed in 1.14.15. How to fix ↓
Also tracked for
- simplesamlphp · Debian:11
The same CVE-2017-12867 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
SimpleSAMLphp is a PHP-based authentication and federation software that provides support for SAML (Security Assertion Markup Language) authentication. It is widely used in various web applications and systems to enable single sign-on functionality. The vulnerability identified as CVE-2017-12867 affects SimpleSAMLphp versions 1.14.14 and earlier. This vulnerability allows attackers with access to a secret token to manipulate the prepended time offset, thereby extending the validity period of the token.
Vulnerability Detail
The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp is responsible for creating and validating time-limited tokens used for authentication. However, due to a flaw in the implementation, an attacker who possesses a secret token can modify the time offset value to extend the token's validity period. This can lead to unauthorized access and potential security breaches. The vulnerability has a CVSS score of 5.9, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.14.15
This is the first release that contains the fix.
composer require simplesamlphp/simplesamlphp:1.14.15Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to the latest version of SimpleSAMLphp.
Conclusion
The vulnerability identified as CVE-2017-12867 in SimpleSAMLphp allows attackers to manipulate the validity period of a token, potentially leading to unauthorized access. To mitigate this vulnerability, it is crucial to upgrade to SimpleSAMLphp version 1.14.15 or later. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for simplesamlphp/simplesamlphp →
FAQ
SimpleSAMLphp is a PHP-based authentication and federation software used for enabling single sign-on functionality in web applications and systems.
The vulnerability allows attackers with access to a secret token to extend its validity period, potentially leading to unauthorized access and security breaches.
To fix this vulnerability, upgrade SimpleSAMLphp to version 1.14.15 or later.
No, there is no known workaround for this vulnerability. Upgrading to the latest version is the recommended solution.
The vulnerability has a CVSS score of 5.9, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for simplesamlphp/simplesamlphp.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
