CVE-2017-12868
1 advisory.
Packagist/simplesamlphp/simplesamlphp CVE-2017-12868: critical 9.8
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module
Action: Upgrade simplesamlphp/simplesamlphp to 1.14.14 or later.
composer require simplesamlphp/simplesamlphp:1.14.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.14.12 | 1.14.14 | - |
Fixed versions
| 1.14.14 |
Sources
- osv: GHSA-j96g-47x2-46hv
- https://nvd.nist.gov/vuln/detail/CVE-2017-12868
- https://github.com/simplesamlphp/simplesamlphp/commit/4bc629658e7b7d17c9ac3fe0da7dc5df71f1b85e
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12868.yaml
- https://github.com/simplesamlphp/simplesamlphp
- https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html
- https://lists.debian.org/debian-lts-announce/2018/06/msg00017.html
- https://simplesamlphp.org/security/201705-01
CVE-2017-12868 · published · modified · JSON