CVE-2017-12873

Publication date

2017-09-01 21:00:00

Family

mitre

State

PUBLISHED

Description

SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.