CVEvulnerability

CVE-2018-7711

8.1 HIGH Published 2018-03-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-347

Description

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP functionality that interprets a -1 error code as a true boolean value.

Affected configurations

• simplesamlphp simplesamlphp (< 1.15.4) • simplesamlphp saml2 (>= 1.0.0 < 1.10.6) • simplesamlphp saml2 (>= 2.0.0 < 2.3.8) • simplesamlphp saml2 (>= 3.0.0 < 3.1.4) • debian debian linux 7.0

Related

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References