CVE-2017-12869: SimpleSAMLphp Authentication context bypass in the multiauth module
Summary
CVE-2017-12869: SimpleSAMLphp Authentication context bypass in the multiauth module. Affects simplesamlphp/simplesamlphp versions < 1.14.14. Fixed in 1.14.14. How to fix ↓
Also tracked for
- simplesamlphp · Debian:11
The same CVE-2017-12869 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SimpleSAMLphp is an open-source PHP authentication and federation software. It provides a set of libraries and modules for implementing Single Sign-On (SSO) and Identity Provider (IdP) functionality. The multiauth module in SimpleSAMLphp allows for the configuration of multiple authentication sources. These sources are defined in the config/authsources.php file. The module is vulnerable to an authentication context bypass, which enables remote attackers to bypass authentication context restrictions and use an authentication source defined in the config/authsources.php file.
Vulnerability Detail
The vulnerability arises due to improper validation of user input in the multiauth module. Attackers can exploit this vulnerability to bypass authentication context restrictions and gain unauthorized access to the system. By leveraging this vulnerability, an attacker can use an authentication source that was not intended to be accessible, potentially leading to unauthorized actions or data exposure.
How To Fix
Minimum fixed version
1.14.14
This is the first release that contains the fix.
composer require simplesamlphp/simplesamlphp:1.14.14Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is strongly advised to upgrade to the latest version of SimpleSAMLphp to mitigate the risk.
Conclusion
The multiauth module in SimpleSAMLphp is vulnerable to an authentication context bypass, which allows remote attackers to bypass authentication context restrictions and gain unauthorized access to the system. To mitigate this vulnerability, it is recommended to upgrade to SimpleSAMLphp version 1.14.14 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for simplesamlphp/simplesamlphp →
FAQ
SimpleSAMLphp is an open-source PHP authentication and federation software used for implementing Single Sign-On (SSO) and Identity Provider (IdP) functionality.
The multiauth module in SimpleSAMLphp allows for the configuration of multiple authentication sources, which are defined in the config/authsources.php file.
This vulnerability allows remote attackers to bypass authentication context restrictions and gain unauthorized access to the system, potentially leading to unauthorized actions or data exposure.
To fix this vulnerability, it is recommended to upgrade to SimpleSAMLphp version 1.14.14 or later, which includes a fix for the authentication context bypass issue in the multiauth module.
There is no known workaround for this vulnerability. It is strongly advised to upgrade to the latest version of SimpleSAMLphp to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for simplesamlphp/simplesamlphp.
