CVE-2017-16853

The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure…

published November 16, 2017

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka CPPOST-105.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01398 · 72.2th percentile
Published
2017-11-16T17:00Z
EPSS history
Timeline
  • 16 NOV 17:00Z
    The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure…
    cvelistv5