CVE-2018-7711
HIGHSimpleSAMLphp < 1.15.4 - Improper Verification of Cryptographic Signature via Boolean Interpretation of Error Code
Title source: llmDescription
HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forcing an error during validation. This occurs because of a dependency on PHP functionality that interprets a -1 error code as a true boolean value.
References (3)
Core 3
Core References
Patch x_refsource_confirm
https://github.com/simplesamlphp/saml2/commit/4f6af7f69f29df8555a18b9bb7b646906b45924d
Third Party Advisory mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/03/msg00017.html
Vendor Advisory x_refsource_confirm
https://simplesamlphp.org/security/201803-01
Scores
CVSS v3
8.1
EPSS
0.0122
EPSS Percentile
64.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-347
Status
published
Products (4)
debian/debian_linux
7.0
simplesamlphp/saml2
0 - 1.10.6Packagist
simplesamlphp/saml2
1.0.0 - 1.10.6
simplesamlphp/simplesamlphp
< 1.15.4
Published
Mar 05, 2018
Tracked Since
Feb 18, 2026