Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: debian
Published: 2019-11-07T19:12:33
Updated: 2024-08-04T19:12:09.411Z
Reserved: 2018-12-31T00:00:00
Link: CVE-2019-3465
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-11-07T20:15:11.090
Modified: 2024-11-21T04:42:06.050
Link: CVE-2019-3465
Redhat
No data.