{"action":"Upgrade simplesamlphp/simplesamlphp to 1.14.12 or later.","affected":[{"fixed":"1.14.12","introduced":"1.14.0"}],"component":"simplesamlphp/simplesamlphp","cve_ids":["CVE-2017-12871"],"ecosystem":"Packagist","epss":0.0049,"exploited":false,"fixed_versions":["1.14.12"],"ghsa_id":"GHSA-ww3w-592j-5qrw","id":"tcs_01M5KFADE60JSDGRY2QP9CZ2W7","modified_at":"2024-04-25T21:26:44.794344Z","published_at":"2022-05-17T01:17:12Z","references":["https://osv.dev/vulnerability/GHSA-ww3w-592j-5qrw","https://nvd.nist.gov/vuln/detail/CVE-2017-12871","https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904","https://github.com/simplesamlphp/simplesamlphp/commit/ccf75981187aa88f7165abdb1b1965c0934acda0","https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12871.yaml","https://github.com/simplesamlphp/simplesamlphp","https://simplesamlphp.org/security/201703-02"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-ww3w-592j-5qrw","url":"https://osv.dev/vulnerability/GHSA-ww3w-592j-5qrw"}],"summary":"SimpleSAMLphp Incorrect IV generation for encryption"}