Security Advisory

CVE-2017-12871

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-01 21:00:00

Last updated 2024-08-05 18:51:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector (IV).

← Browse all CVEs View on cve.org ↗