CVE-2017-12867 in SimpleSAMLphp
Summary
The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
08/15/2017
Disclosure
08/29/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 105916 | SimpleSAMLphp SimpleSAML_Auth_TimeLimitedToken access control | 284 | Not defined | Official fix | CVE-2017-12867 |