CVE-2018-5387

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations	Exploit Third Party Advisory
https://github.com/GoGentoOSS/SAMLBase/commit/482cdf8c090e0f1179073034ebcb609ac7c3f5b3	Patch Third Party Advisory
https://github.com/GoGentoOSS/SAMLBase/issues/3	Issue Tracking Patch Third Party Advisory
https://www.kb.cert.org/vuls/id/475445	Third Party Advisory US Government Resource
https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations	Exploit Third Party Advisory
https://github.com/GoGentoOSS/SAMLBase/commit/482cdf8c090e0f1179073034ebcb609ac7c3f5b3	Patch Third Party Advisory
https://github.com/GoGentoOSS/SAMLBase/issues/3	Issue Tracking Patch Third Party Advisory
https://www.kb.cert.org/vuls/id/475445	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

cpe:2.3:a:wizkunde:samlbase:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-07-24 15:29

Updated : 2024-11-21 04:08

NVD link : CVE-2018-5387

Mitre link : CVE-2018-5387

CVE.ORG link : CVE-2018-5387

JSON object : View

Products Affected

wizkunde

samlbase

CWE

CWE-287

Improper Authentication

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2018-5387", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-07-24T15:29:01.187", "references": [{"url": "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations", "tags": ["Exploit", "Third Party Advisory"], "source": "cret@cert.org"}, {"url": "https://github.com/GoGentoOSS/SAMLBase/commit/482cdf8c090e0f1179073034ebcb609ac7c3f5b3", "tags": ["Patch", "Third Party Advisory"], "source": "cret@cert.org"}, {"url": "https://github.com/GoGentoOSS/SAMLBase/issues/3", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "cret@cert.org"}, {"url": "https://www.kb.cert.org/vuls/id/475445", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}, {"url": "https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/GoGentoOSS/SAMLBase/commit/482cdf8c090e0f1179073034ebcb609ac7c3f5b3", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/GoGentoOSS/SAMLBase/issues/3", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.kb.cert.org/vuls/id/475445", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cret@cert.org", "description": [{"lang": "en", "value": "CWE-287"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers."}, {"lang": "es", "value": "Wizkunde SAMLBase podr\u00eda utilizar err\u00f3neamente los resultados de las API de salto y canonicalizaci\u00f3n XML DOM de tal forma que un atacante pueda manipular los datos SAML sin invalidar la firma criptogr\u00e1fica, lo que permite que el ataque omita la autenticaci\u00f3n de los proveedores de servicio SAML."}], "lastModified": "2024-11-21T04:08:43.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wizkunde:samlbase:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2ADEA56E-AD76-4B50-B81D-1ED60750A44D", "versionEndExcluding": "1.4.2"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}