9.8crit
CVE-2017-12873
Incorrect persistent NameID generation in SimpleSAMLphp
Also known as GHSA-gp2m-7cfp-h6gf
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.7%
percentile 77%
Public exploits
0
none known
Summary
SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.
Exploit prediction (EPSS)
1.66% probability of exploitation in the next 30 days, higher than 77% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| GitHub | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| packagist | simplesamlphp/simplesamlphp | >=1.7.0, <1.14.11 | 1.14.11 |
Classification
- Weakness
- CWE-384 Session Fixation
References
- github.com /simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953 · x_refsource_CONFIRM, x_transferred
- lists.debian.org /debian-lts-announce/2017/12/msg00007.html · mailing-list, x_refsource_MLIST, x_transferred
- simplesamlphp.org /security/201612-04 · x_refsource_CONFIRM, x_transferred
- debian.org /security/2018/dsa-4127 · vendor-advisory, x_refsource_DEBIAN, x_transferred
- github.com /simplesamlphp/simplesamlphp/security/advisories/GHSA-gp2m-7cfp-h6gf · web
- nvd.nist.gov /vuln/detail/CVE-2017-12873 · advisory
- github.com /FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12873.y · web
Sources
- CVE List: CVE-2017-12873
- GitHub Advisory: GHSA-gp2m-7cfp-h6gf
- NVD: CVE-2017-12873
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.