CVE-2016-1000253 onelogin/php-saml signature wrapping attacks
Unknown
PoC
- Published
- Unknown
- Updated
- Exploit status
- Proof-of-concept only
Description
Vulnerability in onelogin/php-saml versions prior to 2.10.0 allows signature Wrapping attacks which may result in a malicious user gaining unauthorized access to a system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onelogin/php-saml(Packagist) | < 2.10.0 | 2.10.0 |
| onelogin/php-saml(Packagist) | = 2.0.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.1.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.3.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.4.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.5.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.6.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.6.1 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.7.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.8.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.9.0 | No fix listed |
| onelogin/php-saml(Packagist) | = 2.9.1 | No fix listed |
References
- github.com patch
- github.com exploit
- github.com product
- github.com