CVE-2016-9955

The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly…

published February 16, 2017

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01182 · 67.3th percentile
Published
2017-02-16T18:00Z
EPSS history
Timeline
  • 16 FEB 18:00Z
    The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly…
    cvelistv5