CVE-2018-1000165

LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/lightSAML/lightSAML/commit/47cef07bb09779df15620799f3763d1b8d32307a	Patch Third Party Advisory
https://github.com/lightSAML/lightSAML/releases/tag/1.3.5	Third Party Advisory
https://github.com/lightSAML/lightSAML/commit/47cef07bb09779df15620799f3763d1b8d32307a	Patch Third Party Advisory
https://github.com/lightSAML/lightSAML/releases/tag/1.3.5	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:lightsaml:lightsaml:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-04-18 19:29

Updated : 2024-11-21 03:39

NVD link : CVE-2018-1000165

Mitre link : CVE-2018-1000165

CVE.ORG link : CVE-2018-1000165

JSON object : View

Products Affected

lightsaml

lightsaml

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

{"id": "CVE-2018-1000165", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-04-18T19:29:00.770", "references": [{"url": "https://github.com/lightSAML/lightSAML/commit/47cef07bb09779df15620799f3763d1b8d32307a", "tags": ["Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/lightSAML/lightSAML/releases/tag/1.3.5", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/lightSAML/lightSAML/commit/47cef07bb09779df15620799f3763d1b8d32307a", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/lightSAML/lightSAML/releases/tag/1.3.5", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later."}, {"lang": "es", "value": "LightSAML, en versiones anteriores a la 1.3.5, contiene una vulnerabilidad de control de acceso incorrecto en la validaci\u00f3n de firmas en readers en src/LightSaml/Model/XmlDSig/ que puede resultar en la suplantaci\u00f3n de cualquier usuario de Identity Provider. La vulnerabilidad parece haber sido solucionada en las versiones 1.3.5 y siguientes."}], "lastModified": "2024-11-21T03:39:50.013", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lightsaml:lightsaml:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10E036B6-AA56-4634-AD85-F96509E77F79", "versionEndExcluding": "1.3.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}