CVE catalog

CVE-2017-18122

simplesamlphp: CVE-2017-18122

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.09% · Oct 25, 2026

A signature-validation bypass issue was discovered in SimpleSAMLphp through 1.14.16. A SimpleSAMLphp Service Provider using SAML 1.1 will regard as valid any unsigned SAML response containing more than one signed assertion, provided that the signature of at least one of the assertions is valid. Attributes contained in all the assertions received will be merged and the entityID of the first assertion received will be used, allowing an attacker to impersonate any user of any IdP given an assertion signed by the targeted IdP.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansimplesamlphpsid2.5.3.1-1fixed
Debiansimplesamlphpforky2.5.3.1-1fixed
Debiansimplesamlphpbookworm1.19.7-1+deb12u2fixed
Debiansimplesamlphpbookworm-security1.19.7-1+deb12u1fixed
Ubuntusimplesamlphppro1.13.2-1vulnerable
Ubuntusimplesamlphppro1.14.0-1vulnerable
Ubuntusimplesamlphppro1.14.0-1ubuntu2vulnerable
Ubuntusimplesamlphppro1.14.0-1ubuntu2+esm1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansimplesamlphpsourcesid1.15.0-1not yet assignedNot reported[889286]
Debiansimplesamlphpsourceforky1.15.0-1not yet assignedNot reported[889286]
Debiansimplesamlphpsourcebookworm1.15.0-1not yet assignedNot reported[889286]

[Debian bug #889286]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [simplesamlphp]Fixed
    Details (4)

    • 1.19.7-1+deb12u2 · all · bookworm

      Fixed · Fixed: 1.15.0-1

      dsa · simplesamlphp · debian · bookworm; dsa · simplesamlphp · debian · 12

    • 1.19.7-1+deb12u2 · all · bookworm

      Fixed · Fixed: 1.15.0-1

      dsa · simplesamlphp · debian · bookworm; dsa · simplesamlphp · debian · 12

    • 1.19.7-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.15.0-1

      dsa · simplesamlphp · debian · bookworm; dsa · simplesamlphp · debian · 12

    • 1.19.7-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 1.15.0-1

      dsa · simplesamlphp · debian · bookworm; dsa · simplesamlphp · debian · 12

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]