The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-09-01T13:00:00
Updated: 2024-08-05T18:51:06.827Z
Reserved: 2017-08-15T00:00:00
Link: CVE-2017-12869
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-09-01T13:29:00.303
Modified: 2019-05-10T19:00:00.173
Link: CVE-2017-12869
Redhat
No data.