漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
A signature-validation bypass issue was discovered in SimpleSAMLphp through 1.14.16. A SimpleSAMLphp Service Provider using SAML 1.1 will regard as valid any unsigned SAML response containing more than one signed assertion, provided that the signature of at least one of the assertions is valid. Attributes contained in all the assertions received will be merged and the entityID of the first assertion received will be used, allowing an attacker to impersonate any user of any IdP given an assertion signed by the targeted IdP.
漏洞信息
N/A
漏洞
N/A
漏洞
SimpleSAMLphp 安全漏洞
漏洞信息
SimpleSAMLphp是一套实现了SAML 2.0服务提供者和标识提供者功能的PHP身份验证应用程序。 使用SAML 1.1版本的SimpleSAMLphp 1.14.16及之前版本中的SimpleSAML_XML_Validator类存在签名验证绕过漏洞。攻击者可利用该漏洞冒充任意的IdP用户。
漏洞信息
N/A
漏洞
N/A