CVE-2017-5530

SAML protocol handling errors in tibbr

High · published December 13, 2017

CVSS v3.0
8.1
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00859 · 57.8th percentile
Published
2017-12-13T02:00Z
EPSS history
Timeline
  • 13 DEC 02:00Z
    SAML protocol handling errors in tibbr
    cvelistv5