The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| simplesamlphp/saml2(Packagist) | 0 | 1.10.5 | N/A |
| simplesamlphp/saml2(Packagist) | 2.0 | 2.3.7 | N/A |
| simplesamlphp/saml2(Packagist) | 3.0 | 3.1.3 | N/A |
CVSS Metrics
