Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2019-0340

Good to know:

icon

Date: November 19, 2019

In simplesamlphp v1.17.0 to v1.17.7, there is an information disclosure vulnerability as a result of a misconfiguration issue, allowing an attacker to access an unprotected endpoint and gather intelligence.

Language: PHP

Severity Score

Related Resources (3)

https://simplesamlphp.org/security/201911-02
https://github.com/simplesamlphp/simplesamlphp/commit/0e0d1f745f5491f9e848b1f3e6da198596bb8885
https://www.mend.io/vulnerability-database/WS-2019-0340

Severity Score

Weakness Type (CWE)

Configuration

CWE-16

Top Fix

icon

Upgrade Version

Upgrade to version 24sessions/simplesamlphp - v1.16.7;24sessions/simplesamlphp - no_fix;24sessions/simplesamlphp - v1.16.4;24sessions/simplesamlphp - v1.16.9;24sessions/simplesamlphp - v1.16.10;24sessions/simplesamlphp - v1.16.6;24sessions/simplesamlphp - v1.16.8;24sessions/simplesamlphp - v1.16.5;simplesamlphp/simplesamlphp - dev-simplesamlphp-1.17;simplesamlphp/simplesamlphp - v1.17.8;tvdijen/simplesamlphp - dev-patch-2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us