CVE-2017-16852

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure…

published November 16, 2017

CVSS
—
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01105 · 65.3th percentile
Published
2017-11-16T17:00Z
EPSS history
Timeline
  • 16 NOV 17:00Z
    shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure…
    cvelistv5