Lightsaml

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lightsaml records in CISA KEV

No Lightsaml vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lightsaml 1 record LOW

Records

1 record

TI-2018-15816 CVE-2018-1000165 · GHSA-vg4f-8v9q-5c3x

LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in…

LOW 35

LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01224 Published 2018-04-18 Fixed in 1.3.5 CWE-732

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0