CVE-2017-12867 in SimpleSAMLphp

Resumen (Inglés)

The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2017-08-15

Divulgación

2017-08-29

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
105916	SimpleSAMLphp SimpleSAML_Auth_TimeLimitedToken escalada de privilegios	284	No está definido	Arreglo oficial	CVE-2017-12867

Fuentes

• MITRE
• NVD
• CVE Details