CVE-2017-11427: python-saml - XML DOM Traversal and Canonicalization Vulnerability
Summary
CVE-2017-11427: Python-saml allows manipulation of SAML data without invalidation of cryptographic signature. Affects python-saml versions < 2.4.0. Fixed in 2.4.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python-saml is a Python library that provides support for SAML (Security Assertion Markup Language) authentication. It allows applications to integrate with SAML service providers for secure authentication and authorization. This vulnerability affects OneLogin PythonSAML version 2.3.0 and earlier. The library incorrectly utilizes XML DOM traversal and canonicalization APIs, which can be exploited by an attacker to manipulate SAML data without invalidating the cryptographic signature. This manipulation could potentially bypass authentication to SAML service providers.
Vulnerability Detail
The vulnerability in python-saml arises from the incorrect usage of XML DOM traversal and canonicalization APIs. By manipulating the SAML data, an attacker can bypass authentication to SAML service providers without invalidating the cryptographic signature. This can lead to unauthorized access and potential security breaches. The vulnerability has a CVSS score of 7.7, indicating a high severity level.
How To Fix
Minimum fixed version
2.4.0
This is the first release that contains the fix.
pip install --upgrade "python-saml==2.4.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version of python-saml to mitigate the risk of exploitation.
Conclusion
The XML DOM Traversal and Canonicalization vulnerability in python-saml can lead to unauthorized access and bypassing of SAML service provider authentication. It is crucial to upgrade to version 2.4.0 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python-saml →
FAQ
python-saml is a Python library that provides support for SAML authentication, allowing applications to integrate with SAML service providers for secure authentication and authorization.
This vulnerability allows an attacker to manipulate SAML data without invalidating the cryptographic signature, potentially bypassing authentication to SAML service providers and gaining unauthorized access.
The CVSS score of this vulnerability is 7.7, indicating a high severity level.
To fix this vulnerability, upgrade to version 2.4.0 or later of python-saml, which includes the necessary fixes to prevent the manipulation of SAML data.
No, there is no known workaround for this vulnerability. Upgrading to the fixed version is the recommended solution.
